Azure Countdown BSI Grundschutz und ISO27001: warum wir eigentlich kein Grundschutzzertifikat mehr brauchen.

Präsentation zum Thema: "Azure Countdown BSI Grundschutz und ISO27001: warum wir eigentlich kein Grundschutzzertifikat mehr brauchen."—  Präsentation transkript:

1 Azure Countdown BSI Grundschutz und ISO27001: warum wir eigentlich kein Grundschutzzertifikat mehr brauchen

2 Axiome 1 jeder JEDER hat eine Azure Subscription (wenn nicht, siehe Azure Everyone) 2 persönlich Alle gezeigten Demos stehen für die persönliche Verwendung bereit: 3 individuell Die Geschichte kann kundenspezifisch angepasst werden

3 Technology Trends: Cloud Adoption
BENEFITS 2 weeks to deliver new services vs months with traditional solution (Case Study: HarperCollins Publishers) Speed Scale 30,000 to 250,000 Scale from site visitors instantly (Case Study: Autocosmos) $25,000 in the cloud would cost $100,000 on premises (Microsoft Azure BI Team, STMG Proof Points Central) Economics of CIOs will embrace a cloud-first strategy in 2016 (IDC CIO Agenda webinar) Cloud Trend: 70% 430B+ Microsoft Azure AD authentications 280% year-over-year database growth in Microsoft Azure 80% of Fortune 500 use the Microsoft Cloud Slide script: According to an IDC study, 70% of CIOs will embrace a cloud-first strategy in 2016. Organizations like yours are adopting cloud computing at this rapid pace to achieve speed, scale, and economic benefits. Momentum stats from AzureCon : today there are 1 Billion customers supported by Microsoft Cloud infrastructure. In 127 countries across the globe. AZURE ADOPTION

4 Cloud Innovation: Risks & Benefits
Pre-adoption concern Benefits realized SECURITY Design/Operation Infrastructure Network Identity/access Data PRIVACY COMPLIANCE TRANPARENCY 94% experienced security benefits they didn’t previously have on-premise 60% cited concerns around data security as a barrier to adoption 62% said privacy protection increased as a result of moving to the cloud 45% concerned that the cloud would result in a lack of data control  Source: Barriers to Cloud Adoption study, ComScore, Sept 2013 Slide script: Azure can help reduce the cost, complexity, and risk associated with security and compliance in the cloud. A survey funded by Microsoft and performed by ComScore demonstrates that while many organizations have initial concerns about moving to the cloud, a majority of cloud adopters achieve significant security benefits: CLICK. Before embarking on cloud computing, 60% cited concerns around data security as a barrier to adoption, and 45% were concerned that the cloud would result in a lack of data control CLICK. However, after moving to the cloud, a majority of cloud adopters achieve significant security benefits. 94% experienced security benefits they didn’t previously have on-premises and 62% said privacy protection increased as a result of moving to the field. Few individual customer organizations can replicate the technology and operational processes that Microsoft uses to help safeguard its enterprise cloud services and comply with a wide range of international standards. When companies use Microsoft Azure, they benefit from Microsoft’s scale and experience running highly secure and compliant online services around the globe. Microsoft’s expertise becomes the customer’s expertise.

5 Compliance und IT-Sicherheit als Erfolgsfaktoren für Clouddeals nutzen

6 Erwartungen des CISO & Compliance Officer (1/3)

7 Erwartungen des CISO & Compliance Officer (2/3)

8 Erwartungen des CISO & Compliance Officer (3/3)

9 Viele Wege führen nach Rom – Demo Time
Trust-Center über das Azure Portal Service Trust Portal (Mirror) über die Infopedia Azure Seiten

10 Fazit & Best Practices Fazit: Best practices:
Mit Compliance und IT-Sicherheit kann man Cloud Deals gewinnen! Microsoft ist dem Wettbewerb aber auch dem klassischen IT-Betrieb in Hinblick auf IT-Sicherheit, Datenschutz und Compliance überlegen Best practices: Bereits direkt zu Beginn der Cloud-Konversation den Dialog mit dem CISO und/oder Compliance Officer suchen und zu Verbündeten machen Im Vorfeld von Ausschreibungen proaktiv die Themen IT-Sicherheit, Datenschutz und Compliance in der Cloud adressieren

11 Ansprechpartner Wer ist AP bei Microsoft?
National Security Officer: Michael Kranawetter PS Cloud Lead: Christian Hahn Compliance Lead Deutsche Cloud: Markus Feichtner Und natürlich CELA, die BGs und STU Aber am Ende sind es: WIR alle!