Regional Gardens Ltd is a company that runs a number of related gardening enterprises. It has a large display garden that it opens for public inspection a number of times a year. These enterprises include the Regional Gardens Nursery which sells plants and garden supplies to the public, and Regional Garden Planners which provides garden advice, design, and consultancy services.

The company is considering the following strategic proposal:

They plan to retain the Bathurst data center for data storage. This would entail updating their Active Directory and data storage infrastructure, and move all other infrastructure into the Cloud.

They plan to initially move all their Web Services into the Cloud in order to provide an increased level of HA (High Availability) as well as a better degree of flexibility in supplying data to their customers and employees. This would entail changing their current web software architecture to take advantage of the flexibility and scalability that can be gained by moving to a Microservices model (this would entail the use of such services as AWS Lambda or Azure Functions, Containers, Data Services, and Cloud Edge capability and monitoring).

They also plan to migrate their LoB (Line of Business) applications to a Cloud Infrastructure to increase their flexibility and availability.

The Board of Regional Gardens is contemplating this strategy as a way to increase the companys flexibility and responsiveness. The Board also expects to achieve significant savings on the cost of maintaining their ICT infrastructure by closing their existing data center. They appreciate that this would entail retraining for their existing ICT staff so that they can manage the new Cloud-based infrastructure.

Regional Gardens has again approached you to advise them on this strategy. You have already advised Regional Gardens that this strategic approach will mean that they will need to ultimately design and operate a Hybrid Cloud methodology, where part of their data center is on-premise and another part in a Cloud.

Regional Gardens also plan to run a Risk and Security Workshop to assess the risks, security issues and possible methods of control that will be required with this Hybrid Cloud approach. You will be required to organize, run and facilitate this workshop.

The Board is also concerned about how this strategy will affect their BCP (Business Continuity Plan) and their backup and disaster recovery strategies.

Tasks Your team has been engaged to provide a risk assessment for MetaSoft in their planned move to a Hybrid Cloud strategy.

The tasks: Your teams task is to prepare a report for Regional Gardens that discusses the following:

Describe which Cloud architectures you would employ to assist Regional Gardens to meet the Boards strategy?

Describe each of the architectures that you would use, along with your reasons for deploying it. (10 marks)

Describe the benefits and issues that would be the result of your deployment of these architectures. (10 marks)

Describe the risks that you see associated with this new Hybrid Cloud and Microservices strategy. You should name and describe each risk that you identify, and then describe a possible control for the risk. This should be presented in a tabular form. (20 marks)

Describe the general Information Security steps and controls that you would recommend to the Board to secure the Hybrid Cloud. You will need to explain to the Board your reasons for recommending these particular security steps. (20 marks)

Discuss briefly what you would recommend should be included in Regional Gardens' BCP as a result of their adoption of a Hybrid Cloud and Microservices approach. You will need to consider, as a minimum, the issues of application resilience, backup and disaster recovery in a Hybrid Cloud environment. This section should be no more than 2 pages. (10 marks)

Discuss the requirements that Regional Gardens will need to consider in order to conduct remote server administration, resource management and SLA management for its proposed IaaS and PaaS instances (it may be useful to consider Morad and Harbhajan's operational checklists for this section). This section should be no more than two to three pages in length. (10 marks)

The Regional Gardens board has also decided to move their eMail instance to the AWS cloud in order to begin the migration process, and test their strategy.

Describe the steps that you would include in the plan to migrate these services. (10 marks)

What are the critical points and issues that you see occurring at each of these steps? Explain why you see these points or issues as critical. (10 marks)

The team is to provide a written report with the following headings:

Proposed Architectures for a Hybrid Cloud

Risk report for Hybrid Cloud and Microservices

Proposed Information Security controls

BCP Changes

Hybrid Cloud Administration and SLA Management

SharePoint Migration Planning

As a rough guide, the report should not be longer than about 6,000 words