The Doppler Quarterly Spring 2017 | Page 14

hour in the day. Again, this goes to how you approach the management of workloads within the hybrid cloud. • Where do the workloads run? On the public cloud, private cloud, or in both places? • Why were the decisions made about where to run the workload? And when may they need to be re-evaluated? 2. Understand security and governance These days, security and governance are a require- ment, whether a mandate from your customers (see “SLAs” below) or from your senior management. This means you need to proactively manage security to make it work. You can also leverage new mechanisms such as IAM (identity and access management), which allow assigning of identities to data, people, devices, and servers, to configure who can access what, and when. Finally, information needs to be encrypted at-rest in some cases, and in-flight in others. Core to this part of hybrid cloud management is how you deal with a few issues: • Security and performance. If the needs of the workload are that information be encrypted at-rest (on the storage systems in the private or public cloud), or in-flight (moving over the net- work), that may result in the risk of lower over- all performance. That needs to be understood and managed, including the use of performance monitoring tools. • Policy management. Governance requires that policies are written and enforced, and this enforcement needs to be understood by those who are managing the hybrid cloud so that they do not conflict or otherwise get in the way