Risk Thinking for Cloud-Based Application Services

Many enterprises are moving their applications and IT services to the cloud. Better risk management results in fewer operational surprises and failures, greater stakeholder confidence and reduced regulatory concerns; proactive risk management maximizes the likelihood that an enterprise’s objectives will be achieved, thereby enabling organizational success. This work methodically considers the risks and opportunities that an enterprise taking their applications or services onto the cloud must consider to obtain the cost reductions and service velocity improvements they desire without suffering the consequences of unacceptable user service quality. Chapter 6: Lean Application Capacity Management -- 6.1 Capacity Management Basics -- 6.1.1 Capacity Management Processes -- 6.1.2 Fast Start-Up and Slow Start-Up Capacity -- 6.2 Simplified Capacity Management Model -- 6.2.1 Capacity Fulfillment (Change) Uncertainties (Risks) -- 6.2.2 Capacity Decision Uncertainties (Risks) -- 6.3 Understanding Application Demand and Demand Management -- 6.4 Understanding Online Application Capacity -- 6.5 Canonical Application Capacity Management Model -- 6.6 Lean Application Capacity Management Strategy -- 6.6.1 Reduce Reserve Application Capacity Targets -- 6.6.1.1 Reducing Reserves Required to Mitigate Inevitable Failures -- 6.6.1.2 Reducing Reserves Required to Mitigate Lead Time Demand -- 6.6.1.3 Reducing Reserves Required to Mitigate Nonforecast Demand Events -- 6.6.2 Eliminate Excess (Wasted) Application Capacity -- 6.7 Managing Capacity Emergencies -- 6.8 Perfect Capacity Management -- Chapter 7: Testing Cloud-Based Application Services -- 7.1 Testing, Uncertainty, and Cloud-Based Applications -- 7.1.1 Knowledge-Based Uncertainty -- 7.1.2 Stochastic Uncertainty -- 7.2 Testing, Verification, and Validation -- 7.3 Test Levels, Types, and Processes -- 7.4 Test Techniques -- 7.5 Test Planning -- 7.5.1 Identify and Analyze Risks (TP3) -- 7.5.2 Identify Risk Mitigation Approaches (TP4) -- 7.6 Context of Testing -- 7.6.1 Vastly More Service Transitions -- 7.6.2 Less Consistent Resource Service Quality -- 7.6.3 Shorter Service Life Cycles -- 7.6.4 ISO/IEC 25010, Quality-in-Use Characteristics -- 7.6.5 ISO/IEC 25010, Product Quality Characteristics -- 7.7 Level of Automation -- 7.8 Scalability Testing -- 7.9 Risk Control Testing -- 7.10 Sensitivity (or Dose-Response) Testing -- 7.11 Automated Acceptance Testing for Service Transitions -- 7.12 Summary -- Chapter 8: Service Design, Transition, and Operations Processes 3.3.3 Change the Risk Consequences -- 3.3.4 Share the Risk with External Party -- 3.3.5 Retain the Risk -- 3.3.6 Reject Accountability -- 3.3.7 Avoid the Risk -- 3.4 Risk Appetite -- 3.5 Risk Management Methodologies -- 3.5.1 Safety Risk Management -- 3.5.2 Enterprise Risk Management -- 3.5.3 Risk IT -- 3.5.4 ISO 31000 Risk Management -- 3.6 Cloud Service Customer Risk Management -- Chapter 4: Cloud Service Qualities -- 4.1 Fundamental Quality Concepts -- 4.1.1 Quality -- 4.1.2 Defects, Errors, Failures, and Incidents -- 4.1.3 Service Quality -- 4.1.4 Service-Level Objectives, Specifications, and Agreements -- 4.2 User Service Quality -- 4.2.1 User Service Qualities to Be Considered -- 4.2.1.1 Service Reliability -- 4.2.1.2 Service Latency -- 4.2.1.3 Service Quality -- 4.2.1.4 Service Outage Downtime -- 4.2.2 International Telecommunications Union Quality of Service -- 4.2.3 ISO/IEC 25010 Quality in Use -- 4.3 ISO/IEC 25010 Product Quality -- 4.4 ISO/IEC 25012 Data Quality -- 4.5 Data, Information, Knowledge, and Wisdom -- 4.6 Quality Model for Cloud-Based Applications -- Section II : Analyzing the Cloud Service Customer's Problem -- Chapter 5: Application Service Life Cycle -- 5.1 Cloud Changes Enabling Application Service Life Cycle Improvements -- 5.2 Standard System Life Cycle Processes -- 5.2.1 Business or Mission Analysis Process -- 5.2.2 Stakeholder Needs and Requirements Definition Process -- 5.2.3 System Requirements Definition Process -- 5.2.4 Architecture Definition Process -- 5.2.5 Design Definition Process -- 5.2.6 System Analysis Process -- 5.2.7 Implementation Process -- 5.2.8 Integration Process -- 5.2.9 Verification Process -- 5.2.10 Transition Process -- 5.2.11 Validation Process -- 5.2.12 Operation Process -- 5.2.13 Maintenance Process -- 5.2.14 Disposal Process -- 5.3 Summary of Likely Application Life Cycle Changes Cover -- Half Title -- Title Page -- Copyright Page -- Table of Contents -- Author -- Abbreviations and Acronyms -- Introduction -- Target Audience of This Book -- A Story Told in Five Sections -- Standard, Authoritative Concepts and Terminology -- Reliability, Availability, Capacity Management, and Risk of Cloud-Based Application Services -- Acknowledgments -- Section I : Framing the Cloud Service Customer's Problem -- Chapter 1: Cloud Computing Fundamentals -- 1.1 Cloud Computing Basics -- 1.1.1 Shared Cloud Infrastructure -- 1.1.2 Automated Life Cycle Management -- 1.2 Roles in Cloud Computing -- 1.3 Input-Output Model of Cloud Computing -- 1.4 Key Characteristics of Cloud Computing -- 1.4.1 Broad Network Access -- 1.4.2 Measured Service -- 1.4.3 Multitenancy -- 1.4.4 On-Demand Self-Service -- 1.4.5 Rapid Elasticity and Scalability -- 1.4.6 Resource Pooling -- 1.5 Cloud Service Management Fundamentals -- Chapter 2: Desired Cloud Service Customer Benefits -- 2.1 Cloud Infrastructure Service Provider Business Models -- 2.2 Cloud Service Customer Business Model -- 2.3 Factoring Benefits of Cloud/Network Functions Virtualization -- 2.3.1 Reduced Equipment Costs -- 2.3.2 Increased Velocity of Time to Market -- 2.3.3 Reduced Development Costs and Intervals -- 2.3.4 Targeted Service Introduction and Rapid Scaling -- 2.3.5 Open and Diverse Ecosystem -- 2.3.6 Optimized Capacity and Workload Placement -- 2.3.7 Multitenancy Support -- 2.3.8 Reduced Power Consumption -- 2.3.9 Improved Operational Efficiency -- 2.3.10 Benefit Summary -- 2.4 IT Service Management Objectives -- 2.5 Focus of This Work -- Chapter 3: Risk and Risk Management -- 3.1 Risk -- 3.1.1 Safety Risk -- 3.1.2 Enterprise Risk -- 3.2 Simplified Risk Impact Model -- 3.3 Risk Treatment Options -- 3.3.1 Replace or Remove the Risk Source -- 3.3.2 Change the Risk Likelihood Content: Introduction. Framing the Cloud Service Customer's Problem: Cloud Computing Fundamentals. Desired Cloud Service Customer Benefits. Risk and Risk Management. Cloud Service Qualities. Analyzing the Cloud Service Customer's Problem: The Application Service Lifecycle. Lean Application Capacity Management. Testing Cloud-Based Application Services. Service Design, Transition and Operations Processes. Continual Service Improvement. Improving Operational Efficiency of Cloud-Based Applications.Service Strategy. Cloud Service Quality Risk Inventory: Factoring Cloud Service Quality Risks. VNF Product Risks Virtual Machine Risks. Virtual Networking Risks. Virtual Storage Risks. Virtualized Application Latency Risks. Service Integration Risks. Visibility Risks. Service Policy Risks. Accountability Risks. Human and Organizational Risks. Lifecycle Management (Execution) Risks. Functional-Component-as-a-Service Quality Risks. Cloud Service Provider Catastrophe Risks. Unknown-Unknown Risks. Cloud Service Quality Risk Assessment and Management: Establish the Context. Establish Service Quality Objectives. Risk Assessment Process. Risk Assessment Techniques. Service Quality Risk Management Process.