IBM Systems Magazine, Mainframe - November/December 2017 - 14

TRENDS

a customer's VMs in a weekend,
Petta points out.
Qualified MSPs are also able
to streamline security through
automated processes. MSPs can
rapidly deploy OSes on servers so
they all have the same security
setting, which makes updating fast
and consistent across all systems.
For many companies,
cloud can play a role in the
standardization of images on a
computer. An image is a single
VM of a given configuration
that's copied, like a template
file, repeatedly on hypervisors
to create many customer VMs
quickly and identically. When
organizations build OSes on
one computer at a time, the
computers aren't consistent.
One computer may be designed
to meet one business need, and
another for something different.
In the cloud, the same system
can be deployed repeatedly so
every environment is identical.
"This allows you to build VMs
so they're all the same and the
security is the same. This is a big
deal for clients when they have a
cloud as a dynamic environment
that can allow for growth,"
Petta says.
"A retailer might need 3,000
VMs to run its business during
the holidays, but only 500

y
In an MSP
environment,
businesses can
select from a
menu of options,
ranging from
no security
protection to
full services
that include
managing the
OS, database,
applications and
security

in the summer. That's where
standardization comes in. You
can scale up with 2,500 new
machines that are all the same.
There are no human errors, and
the images can be regularly
updated and patched before
deployment to always have the
most recent security updates on
them when they are installed."

Layered Approach
Integrating security into every
layer of the cloud, from the
data center to the OS with
regular security scans to spot
vulnerabilities, is the best
practice. Although it's possible
to bolt-on security measures
later-which is better than no
security at all-retrofitting is
almost always more expensive
than implementing security
measures that are in place during
deployment.
"If you build in security at
every layer, it's a much stronger
solution than if you have a cloud
that's partially secure, and then
you come back later and say, 'I
need a security system for my
network or my database or my
application' that gets added on
later," Petta says. "When you try
to use different solutions, they
may not talk to each other very
well and leave gaps."

In addition, if multiple vendors'
technologies are used, they may
not integrate, leaving it difficult
to secure the data. "They may not
coordinate in the way you want
them to. At IBM, we don't roll out
anything without security built in.
We make sure each layer talks to
the other layers," Petta explains.
For example, some security
firms are now leveraging big data
and analytics for data protection.
These companies collect
security-related data from about
100 of their customers, and then
analyze it. The insights inform
their customers about security
threats, such as what types of
attacks are likely, where in the
network they will strike and the
possible impact if successful.
Companies can use that
intelligence to thwart attacks and
safeguard the data environment.
"We now have so much
computing power, IBM Watson*
technology is one example, that
can crunch, analyze, and slice
and dice so much data to see
trends and behaviors, and prepare
for threats more effectively," Petta
said. "Machine learning will also
play a role by recognizing bad
actors. This is technology to get
ahead of the breach to prevent it
instead of react to it."

MSP Differentiators

Questions to Ask Providers
Tony Petta, IBM Cloud Managed Services Compliance and Audit focal,
recommends that businesses ask a managed service provider these
questions to ensure the solution will meet expectations:
* Who is responsible for security?
* How do I know the security is adequate for my needs?
* Does your service include disaster recovery in case something
goes wrong?
* How long have you been providing cloud security solutions?
* How often are security checks performed?
-B.M.

14 // NOVEMBER/DECEMBER 2017 ibmsystemsmag.com

Public clouds are secure in
certain areas, but don't provide
comprehensive end-to-end
security. By contrast, an MSP
can deliver the level of security
the business needs and is then
responsible for that level of health
and protection for the system.
"With public clouds, once they
take the payment and deliver
the resources to stand up the
cloud, everything above the
hypervisor, which is what creates
the virtualization layer that runs
directly on the hardware, is your
responsibility," Petta says.


http://www.ibmsystemsmag.com

Table of Contents for the Digital Edition of IBM Systems Magazine, Mainframe - November/December 2017

Table of Contents
Editor's Desk: Different Cloud Types
TechBits: Doggone Data, Tornado Ally, Watching Watson
Partner POV: Two-Platform IT: Mainframe Cloud Strategy
Trends: Safer Storage: A cloud managed service provider can help with data protection
IT Today: Accelerate Digital Transformation: Enterprise DevOps paired with the IBM z14 helps build modern applications
Cover Story: Step up to the Cloud: New IBM z14 capabilities make it easy to get started
Feature: Open and Connected: IBM z offerings help clients take advantage of the cloud
TECH Showcase: Employee Handbook: To attract and retain millennials, organizations must appeal to their unique wants and needs
Developer: Mainframe in the API Economy: Connect z/OS applications and data to the hybrid cloud with APIs
Solutions: OMC-Flash 4.8.0, Tone Software Corporation; CA Data Content Discovery and CA Compliance Event Manager, CA Technologies
Stop Run: A Strategic Activity: How hobby and career intersect for a global chess master
Reference Point - Global Events, Education, Resources for Mainframe
2017 Mainframe Solutions Edition
IBM Systems Magazine, Mainframe - November/December 2017 - Intro
IBM Systems Magazine, Mainframe - November/December 2017 - Cover1
IBM Systems Magazine, Mainframe - November/December 2017 - Cover2
IBM Systems Magazine, Mainframe - November/December 2017 - 1
IBM Systems Magazine, Mainframe - November/December 2017 - Table of Contents
IBM Systems Magazine, Mainframe - November/December 2017 - 3
IBM Systems Magazine, Mainframe - November/December 2017 - 4
IBM Systems Magazine, Mainframe - November/December 2017 - 5
IBM Systems Magazine, Mainframe - November/December 2017 - Editor's Desk: Different Cloud Types
IBM Systems Magazine, Mainframe - November/December 2017 - 7
IBM Systems Magazine, Mainframe - November/December 2017 - TechBits: Doggone Data, Tornado Ally, Watching Watson
IBM Systems Magazine, Mainframe - November/December 2017 - 9
IBM Systems Magazine, Mainframe - November/December 2017 - Partner POV: Two-Platform IT: Mainframe Cloud Strategy
IBM Systems Magazine, Mainframe - November/December 2017 - 11
IBM Systems Magazine, Mainframe - November/December 2017 - Trends: Safer Storage: A cloud managed service provider can help with data protection
IBM Systems Magazine, Mainframe - November/December 2017 - 13
IBM Systems Magazine, Mainframe - November/December 2017 - 14
IBM Systems Magazine, Mainframe - November/December 2017 - 15
IBM Systems Magazine, Mainframe - November/December 2017 - IT Today: Accelerate Digital Transformation: Enterprise DevOps paired with the IBM z14 helps build modern applications
IBM Systems Magazine, Mainframe - November/December 2017 - 17
IBM Systems Magazine, Mainframe - November/December 2017 - 18
IBM Systems Magazine, Mainframe - November/December 2017 - 19
IBM Systems Magazine, Mainframe - November/December 2017 - Cover Story: Step up to the Cloud: New IBM z14 capabilities make it easy to get started
IBM Systems Magazine, Mainframe - November/December 2017 - 21
IBM Systems Magazine, Mainframe - November/December 2017 - 22
IBM Systems Magazine, Mainframe - November/December 2017 - 23
IBM Systems Magazine, Mainframe - November/December 2017 - 24
IBM Systems Magazine, Mainframe - November/December 2017 - CT1
IBM Systems Magazine, Mainframe - November/December 2017 - CT2
IBM Systems Magazine, Mainframe - November/December 2017 - 25
IBM Systems Magazine, Mainframe - November/December 2017 - Feature: Open and Connected: IBM z offerings help clients take advantage of the cloud
IBM Systems Magazine, Mainframe - November/December 2017 - 27
IBM Systems Magazine, Mainframe - November/December 2017 - 28
IBM Systems Magazine, Mainframe - November/December 2017 - 29
IBM Systems Magazine, Mainframe - November/December 2017 - TECH Showcase: Employee Handbook: To attract and retain millennials, organizations must appeal to their unique wants and needs
IBM Systems Magazine, Mainframe - November/December 2017 - 31
IBM Systems Magazine, Mainframe - November/December 2017 - 32
IBM Systems Magazine, Mainframe - November/December 2017 - 33
IBM Systems Magazine, Mainframe - November/December 2017 - Developer: Mainframe in the API Economy: Connect z/OS applications and data to the hybrid cloud with APIs
IBM Systems Magazine, Mainframe - November/December 2017 - 35
IBM Systems Magazine, Mainframe - November/December 2017 - 36
IBM Systems Magazine, Mainframe - November/December 2017 - 37
IBM Systems Magazine, Mainframe - November/December 2017 - 38
IBM Systems Magazine, Mainframe - November/December 2017 - Solutions: OMC-Flash 4.8.0, Tone Software Corporation; CA Data Content Discovery and CA Compliance Event Manager, CA Technologies
IBM Systems Magazine, Mainframe - November/December 2017 - Stop Run: A Strategic Activity: How hobby and career intersect for a global chess master
IBM Systems Magazine, Mainframe - November/December 2017 - Cover3
IBM Systems Magazine, Mainframe - November/December 2017 - Cover4
IBM Systems Magazine, Mainframe - November/December 2017 - Reference Point - Global Events, Education, Resources for Mainframe
IBM Systems Magazine, Mainframe - November/December 2017 - 2017 Mainframe Solutions Edition
IBM Systems Magazine, Mainframe - November/December 2017 - SE2
IBM Systems Magazine, Mainframe - November/December 2017 - SE3
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20191112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/relevantz_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2019mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20181112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2018mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20171112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_sesupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_linuxsupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20161112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/MainframeSecurity
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20151112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910_se
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910
http://www.ibmsystemsmagmainframedigital.com/MFSkills
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506_supp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20141112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_gt_201405
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/BigData
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20131112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20121112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/buyersguide2013
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/ibmsystems_mainframe_2012bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20111112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20101112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910_bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20091112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090506
http://www.nxtbook.com/nxtbooks/ibmsystemsmag/mainframe_20090304
http://www.nxtbook.com/nxtbooks/mspcomm/ibmsystems_mainframe_200901
http://www.nxtbookMEDIA.com