Page 76 - Cloud computing: From paradigm to operation

1 Framework and requirements for cloud computing

• configuring and maintaining operating systems and hypervisors;

• administering a virtualization environment;
• monitoring the behaviour of the ICT environment of the cloud service provider to ensure that it is
running correctly and that provided cloud services are meeting the terms of the SLA;

• recording problems, reporting problems appropriately (which can involve a message being sent to
one or more customers), and following problem resolution processes until the problem is fixed.

8.3.2.3 Manage assets and inventory
The manage assets and inventory activity involves:
• keeping track of all compute, storage, network and software assets and the relationship between
them. This includes tracking aspects such as versions and patch levels, plus configuration
information, where relevant;
• 'on-boarding' of new assets and disposal of old assets. This can include ensuring that new assets are
fit for purpose and have been properly checked from a security and manageability standpoint and
can include the disposal of assets that are no longer required. This can include appropriate secure
disposal of any assets that might hold data.

8.3.2.4 Provide audit data
The provide audit data activity is the collection and provision of data relevant to an audit request, such as
that relating to security controls or to service performance. The data requested will depend on the auditing
scheme or standard that is being used. This activity involves:
• creating and sending appropriate audit information from logs, etc.;
• redacting information from any log records or other data that might contain sensitive information
or PII.
8.3.2.5 Define environment and processes

The define environment and process activity focuses on defining the required technical environment and
operational processes used when a service is running. This activity involves:

• defining the required technical environment in terms of compute, storage and network resources,
the software dependencies including configuration;
• defining policies and processes for scaling up and scaling down the use of resources in response to
changing usage demand;
• assuring that the cloud service adheres to appropriate standards relating to security and business
compliance;
• defining the processes to follow when the service is running, including plans for fixes, upgrades and
migration.
8.3.2.6 Define and gather metrics

The define and gather metrics activity focuses on defining service level metrics and management. This
activity involves:
• defining the metrics that are used in relation to the operation of cloud services, which are typically
reflected in the SLA relating to those services;

• designing how the metrics are captured for each cloud service;
• defining how the metrics are reported and managed, in particular to ensure that SLA targets are
met.

68