Enhancing EIS by Charles Kruger https://padlet.com/ck29/9qju7omoxb0in765 en-us 2020-06-25 16:23:42 UTC 2025-11-10 00:41:31 UTC hello@padlet.com A clear vision of OIT's next steps should help EIS understand and focus on tech/skills https://padlet.com/ck29/9qju7omoxb0in765/wish/644943245 2020-07-01 12:46:36 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644943245 Communication is key. High to low, low to high, left to right. https://padlet.com/ck29/9qju7omoxb0in765/wish/644944170 2020-07-01 12:47:58 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644944170 I feel it's about time to re-align our structure to modern organizations - DC https://padlet.com/ck29/9qju7omoxb0in765/wish/644944653 2020-07-01 12:48:42 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644944653 We learn new skills to keep us up to date - DC https://padlet.com/ck29/9qju7omoxb0in765/wish/644945343 2020-07-01 12:49:42 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644945343 metrics for success will be required. https://padlet.com/ck29/9qju7omoxb0in765/wish/644947033 2020-07-01 12:51:49 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644947033 What is the overall goal for this effort? https://padlet.com/ck29/9qju7omoxb0in765/wish/644947788 2020-07-01 12:52:58 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644947788 What are the other EIS teams doing - Martin https://padlet.com/ck29/9qju7omoxb0in765/wish/644949129 2020-07-01 12:54:45 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644949129 https://padlet.com/ck29/9qju7omoxb0in765/wish/644953698 Learning new technologies and increasing our skill sets - jf]]> 2020-07-01 13:00:33 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644953698 More of a question. Is anyone not excited or afraid of this change? - DC https://padlet.com/ck29/9qju7omoxb0in765/wish/644954926 2020-07-01 13:02:06 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644954926 Will I be needed going forward? - jf https://padlet.com/ck29/9qju7omoxb0in765/wish/644956152 2020-07-01 13:03:49 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644956152 we get a 100% raise - Charles Kruger https://padlet.com/ck29/9qju7omoxb0in765/wish/644965390 2020-07-01 13:15:40 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644965390 Are we using outside resources to help reorg - John https://padlet.com/ck29/9qju7omoxb0in765/wish/644966205 2020-07-01 13:16:45 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644966205 I feel they need more definition than just "going to the cloud" - DC https://padlet.com/ck29/9qju7omoxb0in765/wish/644968375 2020-07-01 13:19:25 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644968375 "Why" cloud first. Need strategy holistically. https://padlet.com/ck29/9qju7omoxb0in765/wish/644971535 2020-07-01 13:23:08 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644971535 I don't think we should get to hung up on how much it costs to move Peoplesoft to the Cloud. That is for Jay and the Senior Staff to worry about; I am sure they know it could be more expensive that what we are doing now https://padlet.com/ck29/9qju7omoxb0in765/wish/644984082 2020-07-01 13:37:02 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644984082 Overall design is needed FIRST. When you build a house, you design it before actually starting construction. https://padlet.com/ck29/9qju7omoxb0in765/wish/644990939 2020-07-01 13:45:22 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644990939 If the only reason we are moving to the cloud is to address the needs of DevOps (be it OIT or campus departments), then perhaps we should re-evaluate. One additional experienced individual added to our team to address cloud infrastructure, programming needs, and DevOps could meet that need. https://padlet.com/ck29/9qju7omoxb0in765/wish/644992380 2020-07-01 13:46:50 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644992380 Security needs to be made a priority in the design phase. There's a quote from CompTIA that basically states it will cost an organization much more to address security after the fact (approx 9 times more), than if it is included in the design. https://padlet.com/ck29/9qju7omoxb0in765/wish/644995753 2020-07-01 13:50:27 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644995753 Reducing the amount of frustration involved when trying to work with other departments. https://padlet.com/ck29/9qju7omoxb0in765/wish/644998570 2020-07-01 13:53:31 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/644998570 Use of scale sets could be very useful for such things like class registration, admissions, drop\add, room draw, etc, where based upon a specific threshold, additional VMs can be automatically spun up to support the load. However, applications must be able to support this. https://padlet.com/ck29/9qju7omoxb0in765/wish/650989764 2020-07-09 13:32:13 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650989764 Duplication of current services: Firewall, DDoS Protection, Infrastructure, IAM, Monitoring. See screenshot for duplication of Security Tools. In order to create a secure environment in the cloud, we will literally be recreating the same environment we have here, yet we will be expected to continue to run our current infrastructure as well as the new infrastructure. Where are these resources going to come from? https://padlet.com/ck29/9qju7omoxb0in765/wish/650990415 2020-07-09 13:33:05 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650990415 Fileshares are incredibly easy to create (although could be costly depending on the region\how often they are accessed) https://padlet.com/ck29/9qju7omoxb0in765/wish/650990910 2020-07-09 13:33:38 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650990910 Key Vault may be very useful to DevOps in securely storing passwords applications may need. Also useful to SOC and CSS in create\control encryption keys, provision, manage, deploy public\private SSL\TLS certificates. More centrally managed, don't have to manage a separate application to store encryption keys. Also useful: self service password reset. https://padlet.com/ck29/9qju7omoxb0in765/wish/650991153 2020-07-09 13:33:56 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650991153 Policies would allow us to ensure VMs have a departmental tag associated with them. Much more efficient to receive a real-time error when forgetting something, than to have to go back and fix it later. https://padlet.com/ck29/9qju7omoxb0in765/wish/650991334 2020-07-09 13:34:11 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650991334 Azure Locks helpful to guard against human error\accidental deletion of a resource. https://padlet.com/ck29/9qju7omoxb0in765/wish/650991505 2020-07-09 13:34:23 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650991505 Azure Monitor would allow us to view metrics\logs\service health\create alerts for resources hosted in Azure.Who will be responsible for creating policies\controlling Network Security Groups to lock this down? Who will have access\abilitiy to create VMs in Azure that has Princeton data on it? Who will be responsible for ensuring no restricted data is put on such a machine? Ex: Joe Schmo from East Asisan Studies decides he wants a VM in Azure, spins one up with an easily crackable password, public access from the internet via RDP and puts some restricted data on it. We know Direct RDP access is not permitted currently from OIT (and for good reason). Who's going to stop this from happening? Unless hosting Web Apps by using Azure PaaS, this is riddled with Security issues. Joe Schmo can easily make the argument that since we are now a Wireless shop, he has to leave RDP open to the Internet since his IP may change. https://padlet.com/ck29/9qju7omoxb0in765/wish/650991687 2020-07-09 13:34:39 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650991687 There is a place for DevOps, but it should not lead the way in how an organization is run. It is very easy to look at Azure as a simple way to spinup VMs. However, there are numerous security concerns that are not being addressed. Since managers are required to stay out of daily operations, it is easy to forget security\not understand what the day-to-day looks like and more importantly, WHY things are set up the way they are. How can we ensure GPOs, CrowdStrike, etc will be deployed to all new VMs? How will patching be enforced? https://padlet.com/ck29/9qju7omoxb0in765/wish/650992332 2020-07-09 13:35:32 UTC https://padlet.com/ck29/9qju7omoxb0in765/wish/650992332