Compliance for Cloud Infrastructure

4Base Technology was enlisted by the worldwide leader in retail transaction processing services to ensure that the different virtualization technologies being adopted could meet strict compliance standards before those platforms could be introduced into the production environment. The organization had great success with leveraging platform virtualization technologies in the non-production Development environment and wanted to realize those benefits for production applications. The company was challenged, however, because servers residing in the production environment are held to strict security and operational standards due to the nature of the data present there such as personal cardholder information. This sensitive data and associated regulations (i.e. Payment Card Industry Data Security Standards) require that all systems residing in the production environment adhere to strict key controls that are enforced through various hardening techniques, auditing tools and compliance verification processes. Cursory application of the required tools and methods on the different virtualization technologies being adopted exposed incompatibilities that had to be overcome to introduce platform virtualization in any capacity in the secure production environment .

The organization called on 4Base Technology to identify the specific compliance gaps relative to each virtualization technology, to develop an actionable plan for making each platform compliant and to execute a repeatable pilot program to verify their compliance capability after remediation steps were performed. 4Base began the effort by analyzing various company-specific controls and associated technical requirements. Gap analysis was then performed with issues clearly communicated via overview diagrams supported by written details describing the specific issues and 4Base’s suggested approach to remediation. With the true scope of the compliance gaps understood 4Base was then able to execute on the remediation plan until each virtualization technology platform was ready to be verified through the pilot program phase. Once execute, the gap was repeatedly narrowed with further remediation until a representative “golden image” for each platform was verified to be compliant and ready for production deployment.

Virtual Infrastructure Impact Analysis
Using their proven Operational Readiness methodology, 4Base examined the production IT environment at both a macro and micro-level for its ability to support the adoption of virtualization. read more>

Operational Readiness for Virtual Infrastructure
Using our proven Operational Readiness for Virtualization methodology, 4Base started with a thorough discovery process to understand the real requirements of the Operations group, which were then put through a gap analysis with resulting assessments and corrective blueprints. read more>

Operations Management Guide for Virtual Infrastructure
The IT department for one of the largest city governments in the United States engaged 4Base Technology’s virtualization consulting services to evaluate their operations and create a management guide of technical operating procedures to formalize the common tasks needed to maintain their virtualization infrastructure. read more>

Data Backup: Strategy & Architecture Development
4Base interviewed business leaders and other stakeholders to develop restore RPO and RTO details, created SLAs between the business and IT, and designed a complete backup and restore architecture. read more>

Interstate Data Migration: Netapp Storage
4Base Technology engineers where brought in to help re-architect the storage and to develop a migration plan that would reduce the time and complexity of the migration.
read more>

4Base Technology, Inc.
1298 Kifer Road
Suite 508
Sunnyvale, CA 94086

Phone: 408-773-8960
Fax: 408-773-8477
info@4basetech.com