Current On-Premises realities
80% global IT budgets spent on maintenance, hardware,
support, learning of infrastructure technologies
How much do you spend in DC maintenance?
28% time spent on administrative tasks
Do you spend enough time delivering
value business applications?
How Microsoft Azure can help
Accelerate your business continuity strategy
Reduced Reduced Increased
cost complexity compliance
42+
Azure regions
Platform engineered with commonalities for flexibility, consistency
CUSTOMER
DATACENTER Development Virtualization
code once, deploy built in, not an add-on
VMs anywhere
Management Data platform
unified view across analytics and storage
CONSISTENT premises spanning clouds
PLATFORM
MICROSOFT SERVICE Identity
AZURE PROVIDER single sign-on
Azure is the most cost-effective cloud for Windows
Digital Transformation
Productive Hybrid Intelligent Trusted
Azure. Cloud for all.
Productive Hybrid Intelligent Trusted
Unparalleled developer productivity
Productive
Integrated tooling 100+ services Unified management
Hybrid
Intelligent
Trusted
Secure and well-managed for IT
Productive Govern Secure
Hybrid
Management
portal
Configure Protect
Intelligent
Trusted
Monitor
Providing the only consistent, hybrid cloud
Productive
Azure Active Azure Azure Azure Security
Directory Services Data Services & Management
Hybrid
Common Unified Cloud Data Security &
Identity Platform Platform Management
Intelligent
Trusted Active Azure SQL On-premises
Directory Stack Server Infrastructure
Productive
Hybrid
At the edge and Meet every regulatory Cloud application
Intelligent
disconnected requirement model on-premises
Trusted
Productive
Hybrid
Azure: the cloud for
intelligent solutions
Intelligent
Trusted
Productive AI for every developer and scenario
Productive
Frameworks & Tooling
VS, ML STUB, Tensor, Caffe
Services
Bots, Cognitive, ML
Hybrid
Azure
Intelligent
Infrastructure and Compute Data
CPU, GPU, FPGA SQL DB, Cosmos
Trusted
DB, POST, MySQL
ISO 27001 ISO 27018 ISO 27017 ISO 22301 SOC 1 Type 2
GLOBAL
Productive SOC 2 Type 2 SOC 3 CSA STAR
Self-Assessment
CSA STAR
Certification
CSA STAR
Attestation
Shared
INDUSTRY
PCI DSS
Hybrid Level 1
CDSA MPAA FACT UK Assessments FISC Japan
HIPAA /
HITECH Act
GxP IG Toolkit UK
HITRUST MARS-E FERPA GLBA FFIEC
21 CFR Part 11
Intelligent
REGIONAL
Argentina EU UK China China China Singapore Australia New Zealand
PDPA Model Clauses G-Cloud DJCP GB 18030 TRUCS MTCS IRAP/CCSL GCIO
Trusted
Japan My ENISA Japan CS Spain Spain India Canada Privacy Germany IT
Number Act IAF Mark Gold ENS DPA MeitY Privacy Laws Shield Grundschutz
workbook
Productive
Azure
Hybrid
Security Center
Protection through best practices
Intelligent
Detect threats and attacks
Remediate issues
Trusted
Tools
Developer DevOps Portal +
Tools Tools Scripting
Advanced workloads
Web + Mobile Identity
Advanced workloads
Internet of Things Data + Analytics
Microservices Artificial Intelligence
Containers Cognitive Services
Serverless High Performance Computing
Core infrastructure
Core infrastructure
Security Management
Compute Storage Networking
Connect every on-premises
server to the cloud
Azure
Storage
Backup
Disaster recovery
Identity
Networking
Operational Insights
IoT
On-Premises Datacenter
Tools
Leverage a secure and well-managed infrastructure Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Compute Storage Networking Management
Virtual machines Disks Virtual networks Log analytics
Availability sets Blob storage VPN, ExpressRoute Cloud Shell
VM scale sets File sync Load Balancer Site Recovery
Controlled maintenance DNS, Traffic Manager Security Center
RECENT ANNOUNCEMENTS
Azure Cost Management Azure Availability Zones Reserved VM instances
Tools
Build with a platform designed for future growth Advanced
workloads
Core
infrastructure
App service DevTest Labs Logic apps Cosmos DB
Web, mobile, and Integrate with your Workflow and Globally distributed, multi-
API apps existing toolchain integration model database service
RECENT ANNOUNCEMENTS
Cosmos DB and Azure
Scalable quantum Azure Container Instances
Functions native
computing (Kubernetes or Docker)
integration
Tools
Azure Stack
Advanced
+ Hybrid
workloads
Core
infrastructure
Azure Advisor, Cloud Shell
Monitor and Cost
Management
Built-in security and Azure
management mobile app
Cameras / Alarms Secure By Design
24X7 security staff Operation Security Controls
Barriers / Fencing Compliance Certifications
Two-factor access control Penetration Testing
Days of backup power Forensics
Secure and Isolated VNets
Anti-Malware
Inbound VNet ACLs
VM Security Extensions
Forced Tunneling
Role-Based Access Controls
Security Appliances
Logging / Auditing
Multiple virtual NICs
Encrypted VHD Boot
Tools
Enabling Audit at Scale Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
• For fee 1:1 access to Microsoft experts, information, and evidence
Audit
Request
Compliance
• Ability to add controls to Audit
• Ability to influence direction (SIFMA vs ENISA vs Other)
Compliance
• Cross group learnings
Program
Community
• Ability to request new updates (encryption) Program
• SME engagement
Compliance Program • Pentest report
Summits • Audit webcasts
• Early release documentation (Pandemics protection, DDOS)
• Industry aligned responses (PCI)
Targeted information • DLP controls
• FAQs • Data Privacy
Contractual Obligations, Audit Reports
• ISO/SSAE16 audit reports
• Industry Regulator examination
All Customers
and Insights • Data deletion,
• Data usage • Geo Location
• Data location • Sub Contractors
Trust Center and Certifications • Best Practice Guidance
• Roadmap and Changes
• Certification links • Audit Log Access
• Azure Logon reporting
Service Features and Functionality
• Third party tooling
• E-Discovery Tooling
• APT protection
Microsoft Cloud Security Controls
Multi-Factor
Access Controls Encryption Monitoring
Customer Authentication
Controls Identity Federation Data Loss 3rd Party
Antimalware
Prevention Additions
Secure
Azure Office 365 CRM Online
Services
Tenant Isolation Zero Privilege
Geo-redundancy Assume Breach
Secure Access Controls
Foundations Physical Security
Configuration Denial-of-service
Secure Network
Automation mitigations
Single Global
Compliance
Security Privacy Independent
Practices Management
and Risk
Practices Verification
Management
System
Tools
ISO 27018 – Born in the Cloud Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Key Principles - Cloud providers must:
Not use data for advertising or Be accountable to determine if
marketing unless express consent is customer data was impacted by a
obtained breach of information security
Be transparent about data location Communicate to customers and
and how data is handled regulators in the event of a breach
Provide customers with control over Have services independently audited
how their data is used for compliance with this standard
SECURING THE PLATFORM
Strategy: Employ risk-based, multi-dimensional approach to safeguarding services and data
Internal Network
Management Data & Keys User Application Host System Facility
Network Perimeter
Secure Admin Data Protection Admin Access Application Host Protection Network Security Network Security Physical Security
Workstation Access control, Identity Security Access Access control, Segmentation, Edge ACLs, DOS, Physical controls,
Hardened OS, URL encryption, key management, dual- control, monitoring, monitoring, anti- intrusion detection, intrusion detection, video surveillance,
filtering, only management factor anti-malware, malware, vulnerability vulnerability access control
signed binaries, authentication, vulnerability vulnerability scanning scanning
dedicated training and scanning, patch and scanning, patch and
identity/resource awareness, configuration configuration
forests screening, Least and management management
Temporary Privilege
Tools
Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Tools
Comply with industry and regional requirements Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
GLOBAL
CSA STAR CSA STAR CSA STAR
ISO 27001 ISO 27018 ISO 27017 ISO 22301 SOC 1 Type 2 SOC 2 Type 2 SOC 3
Self-Assessment Certification Attestation
INDUSTRY
PCI DSS Shared HIPAA / GxP
CDSA MPAA FACT UK FISC Japan HITRUST MARS-E IG Toolkit UK FERPA GLBA FFIEC
Level 1 Assessments HITECH Act 21 CFR Part 11
REGIONAL
Argentina EU UK China China China Singapore Australia New Zealand Japan My ENISA Japan CS Spain Spain India Canada Privacy Germany IT
PDPA Model Clauses G-Cloud DJCP GB 18030 TRUCS MTCS IRAP/CCSL GCIO Number Act IAF Mark Gold ENS DPA MeitY Privacy Laws Shield Grundschutz
workbook
Tools
Modernize DevOps solutions with Visual Studio Advanced
workloads
Core
infrastructure
Mobile DevOps Mobile back-end services
Cloud and offline data
Code Build + Test Cloud User Beta
Repository Deploy Testing User authentication
Push notifications
Backlog Monitor/Analytics
Tools
Build and innovate with choice and flexibility Advanced
workloads
Core
infrastructure
DevOps
Management
Applications
App frameworks
& tools
Databases &
middleware
Infrastructure
Tools
Add a natural, human touch with Cognitive Services Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Vision Speech Language Knowledge Search
Computer Vision Speech-to-text and Natural Language Knowledge Bing Search
text-to-speech service Processing Exploration Service
Listening… Listening… Listening… Listening… Listening…
Object Convert this text to Play today’s Top publications Fraud prevention
recognition… speech please… conference call… in AI... results…
Tools
Simplify IoT with preconfigured solutions Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Azure IoT Suite
Street
sweepers
Buses Cows Vending Buildings Device connectivity & management
machines
Postboxes Data ingestion and command & control
Oil
Auto
equipment
Aircraft
Factory
Stream processing & predictive analytics
Electric floor
charging
Power stations Workflow automation and integration
plant
Racing
IoT
Dogs Dashboards and visualization
Medical
devices
Trucks Preconfigured solutions
Power Mining
Oil tools equipment
distribution Remote monitoring
Elevators
Smart
Predictive maintenance
Smart meters Surveillance grids Engines
Connected factory (new)
Tools
Empower your decisions with business insights Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Back-end power Front-end insights
Big data
Web data
Traditional
data
Tools
Predict customer needs with powerful tools Advanced
Azure Stack
+ Hybrid
workloads
Core
infrastructure
Azure Machine Azure Machine
Learning templates Learning services
Data Modeling & APIs
Clients
Demand forecasting ML WORKBENCH
CLOUD
Predictive maintenance
Big data
API
Vehicle telemetry Web data
Traditional
data
RECENT ANNOUNCEMENTS
ML workbench ML experimentation service ML model manager service
Platform Services
Security & Hybrid
Management Cloud
Azure AD
Security Center Content SQL Health Monitoring
Media Media SQL Data DocumentDB
Services Analytics Delivery Web Mobile Database Warehouse
Network Apps Apps
Portal AD Privileged
Identity
SQL Server Redis Storage Azure Management
Azure Active API Cloud Stretch Database Cache Tables Search
Directory Apps Services
Domain Services
Azure AD API BizTalk
B2C Management Services Notification
Service
Fabric Hubs
Logic Backup
Multi-Factor Cognitive Services Bot Framework Cortana
Apps Service Bus Functions
Authentication
Automation Operational
Analytics
Scheduler HDInsight Machine
Learning Stream Analytics
Visual Studio Mobile
VM Engagement Import/Export
Container
Service Scale Sets
Key Vault Data Data Lake
Catalog Analytics Service Data Lake Store
VS Team Services Xamarin
Batch Azure Site
Store/ RemoteApp Recovery
Marketplace
IoT Hub Event Data Power BI
Application HockeyApp Hubs Factory Embedded
Insights StorSimple
VM Image Gallery
& VM Depot
Infrastructure Services
What do others say?
Usage increase of 17% from 2016 to 2017
Usage increase of 14% from 2016 to 2017
Magic Quadrant for Magic Quadrant for Magic Quadrant for Magic Quadrant for Magic Quadrant for Magic Quadrant for
Cloud Infrastructure as a Public Cloud Storage Enterprise Application Business Intelligence and Access Management Content Services
Service Worldwide Services Platform as a Service Analytics Platforms (2017) Platforms
(2017) (2017) (2016) (2017) (2017)
LEADER LEADER LEADER LEADER LEADER LEADER
*Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact.
Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
>95%
of Fortune 500 use
Microsoft Cloud
What now ?
1. Try 2. Plan 3. Deploy