© Copyright 12/1/2015 BMC Software, Inc 1

Accelerating Digital Transformation

David Cramer

Vice President

November 2015

Digital Transformation - using technology to improve reach and drive new levels of performance

Customer

Experience

Operational

Processes

Business

Models

This shift requires alignment across the leadership team…

INCREASING THREATS

DISTRIBUTED RESOURCES

ACCELERATED EXPECTATIONS

70% Share of large enterprises that will use

hybrid cloud services by 2017

97% Percentage of CISOs who expect an

attack by an advanced threat in the

next 12 months

5x Rate at which demand for mobile app

development services will outpace IT

capacity to deliver by 2017

Source: Gartner Application Architecture, Development & Integration Summit, July 2015

Source: CEB, “IT Quarterly,” Q1 2015

Source: Gartner: “Private Cloud Matures, Hybrid Cloud Is Next,” September 2013

BUSINESS UNIT HEADS

CISO

VP INFRASTRUCTURE / CLOUD

CIO

Trends in Digital Transformation

Hybrid Cloud

Private cloud Service-users

Data center

(corporate IT)

Public Cloud

FROM:

IT-centric

On-premise

TO:

Business-centric

Multi-sourced

Canary Deployments – Testing in Production

1 - New version is deployed

2 - Small set of users are

rerouted to new version

and monitoring is used to

determine if process can

continue

3 – Process is repeated until all

users are routed to the new

version and the old version is

decommissioned

Docker and Container Management

Containers enable standardized movement of applications

Standard form factor makes

them easier to manage

Allow for greater server density

Analogous to shipping containers and standard mount points

Multi-modal shipping was a

supply chain game changer…

CHARACTERISTICS OF MICROSERVICES

The term "Microservice Architecture" has sprung up over the last few

years to describe a particular way of designing software applications

as suites of independently deployable services.

An approach to developing a single application as a suite of small services

Each service runs in its own process with lightweight communication mechanisms

Services are built around business capabilities and are independently deployable and scalable

Each Service represents a Business Capability as opposed to a technology

Microservices

Microservices vs. Traditional Approach

Microservices

Architecture with

each element of

functionality in a

separate

service….

Traditional

monolithic

application

with all

functionality

in a single

process…

Scales by replicating entire

application on multiple

servers

Scales by distributing services

across servers, replicating as

needed

http://martinfowler.com/articles/microservices.html

Accelerating Digital Transformation

BMC Automation enabling customers to accelerate with control

BMC

Digital Service

Acceleration

Dynamic

Infrastructure

INCREASED

VELOCITY

MITIGATED

RISK

IMPROVED

CONTROL

Agile Applications

BMC

Digital Service

Acceleration

Dynamic

Infrastructure

INCREASED

VELOCITY

MITIGATED

RISK

IMPROVED

CONTROL

1000s

Flood of Releases from Development

# of apps

App Releases

Daily

Waterfall Agile

10s

Yearly Release Cadence

IT Operations Development

Wall Exists between Design & Operations of Services

Design Operate Digital

Services

Development

IT Operations

Blur lines between Design & Ops through Continuous Delivery Pipelines

deploy

operate

monitor

release

test

plan code

build

Shift-left IT Ops functions into design of applications

Tomorrow

Dev IT Ops

App Packaging • Infrastructure Catalog • Monitoring Policies • Compliance Policies • Patching Policies • Placement Policies

Shift Left

Today

• App Packaging

• Monitoring as Code • Compliance as Code • Patching as Code

• Infrastructure Catalog • Placement Policies

Dev IT Ops Digital Service

s

Digital Service

s

BMC customer results

Leading US investment research firm

88% Reduction in time to deploy digital service updates

Leading North American bank

Agile

Applications

520 hours to 32 hours Time to build new custom environments for development, QA, staging, and production

Major international media enterprise

Six hours to 30 minutes Time to deploy an application on a single server

BMC

Digital Service

Acceleration

Intelligent Compliance

Dynamic

Infrastructure

INCREASED

VELOCITY

MITIGATED

RISK

IMPROVED

CONTROL

Operations Role in Protecting Digital Services

Scheduled

Responsive

Planned Patching

System

Hardening

Security Audits

Regulatory Audits

Known

Vulnerability

Remediation

New Vulnerability

Eradication

So Why Do Breaches Still Happen?

Coverage – you can’t patch what you don’t know

Downtime – hard to schedule maintenance times with users

Complexity – dependencies make it hard to isolate actions

193 Days to resolve

average vulnerability

Most Breaches Exploit Known Vulnerabilities

ATTACKS

80%

More than 80% of attacks target known vulnerabilities

99.9%

FIX READY

99.9% of exploits were compromised over a year

after the CVE was published

Remediate: Close the SecOps Gap

• Automatic correlation of discovered vulnerabilities and patches

— Filter to systems through operational views

— Deploy remediation actions

• Network vulnerability identification and remediation action capabilities

• Integrate with Change Management

Reduce vulnerabilities by reducing SecOps friction

BMC customer results

Reduction in time to validate minimum security baseline

Fortune 500 bank

Major US manufacturing company

30 minutes to < one min Reduction in time to fix known vulnerabilities

880 hours to 33 seconds

Intelligent

Compliance

Large European bank

75% Reduction in deployment errors

BMC

Digital Service

Acceleration

Dynamic Infrastructure

Dynamic

Infrastructure

INCREASED

VELOCITY

MITIGATED

RISK

IMPROVED

CONTROL

Centralized Self Service Access to Hybrid Cloud Services

Corporate

Datacenters

Corporate IT

Private Clouds Public Clouds

Self-Service Portal

Applications

Delivery of Full Stack Provisioning

Applications Platforms Infrastructure

From hardware… …to fully configured services

Dev and QA spend a considerable amount of time configuring environments instead of coding and testing

IaaS Offering (ex.

RedHat)

IaaS+ Offering (ex. WebSphere)

Fully Configured Environment

(ex. Banking App)

Configure Network

Install Middleware

Install App Code

Provision Sever

Configure Middleware

Certify Environment

Effort: 4+ hours Lead Time: 1+ days

Effort: 2+ hours Lead Time: 2+ days

Effort: 1+ days Lead Time: 1 day

Effort: 2+ hours Lead Time: 1 day

Effort: 2+ days Lead Time: 2+ days

Per Environment Total Effort: 4+ days

Total Lead Time: 7+ days

BMC customer results

90 days to hours Faster provisioning of IT multi-cloud services

5,000 employees US software consultancy company

Large North American energy company

$80M In policy-based, cloud-provider fee reduction through CLM

Dynamic

Infrastructure

BMC Enables Digital Transformation

Customer

Experience

Operational

Processes

Business

Models

Continuous Delivery

Shift Operation Left

Agile

Applications

Automated

Remediation of

Vulnerabilities

Self Service

Environments

Hybrid Cloud

Containers

Microservices

Thank You