BrainScale Overview

• Established in 2007 by two engineers • Headquartered in Princeton, NJ with a Global Presence • Focused on “Enterprise” Hybrid Cloud Strategy BrainScale is the top • Design thinking and Solution Engineering Azure integrator in • Deep expertise of Azure cloud with a team that is 100% Azure certified North America

13+ YEAR MICROSOFT PARTNERSHIP BrainScale Cloud Solutions Service Offerings and IP Solutions

Enable Migrate Innovate Manage

Design/Security/Governance Economic Assessments MicroServices Tier-1 CSP for Azure.

SRE and SIEM SAP Migrations Bigdata and Analytics End to end hosting and managed services. Dev Ops Data migrations Azure Arc for Hybrid and Multicloud

Cost Optimization R Factorization for Cloud Azure Synapse for Analytics

Multi Cloud / Hybrid Cloud Data Migrations at Scale Analytics

Cloud Enablement Migrations Innovate AzCop/GcCop for Governance & AzMigrate Chat/ InfoBot / WorkFlow Bots Self Service (Azure/GCP) Cloud cost management/ Monolith to Microservices optimization APIXELL (Proposal) AutoNote Artisan RPA on Azure batch DRaaS Enterprise Cloud Strategy and BrainScale’s Solution Map

Governance Security

Cloud Strategy

Improve cost structure Organized Cloud Roles and Responsibilities Law of the Land Industry Compliance Org. Security Baseline AZ AZ Migrate

IT OPS Deployment Acceleration Automation and Scalability

Automation Reusable Infrastructure Self Service Capabilities Resource Consistency Life Cycle Management Just In Time Elasticity

Templates DraaS

Disaster Recovery Site Reliability Process Chain High Availability Az Cop

Business

Continuity Cost Management

Risk Management Support Workflow Management RTO, RPO and SLA’s Artisan

Democratize Smart Spread Optimization and Diversification

Innovations Machine Learning IoT and Edge Systems Hyperscale Data Analytics Knowledge Management Artificial Intelligence Multi Cloud

Connected Things Automation Tuxedo Cognitive Analytics Innovate

AI Our Solutions that Aid ML cloud adoption process Our Service Offerings IOT Analytics 10X Faster

In your cloud • AzCop • Cost Management adoption journey Microservice Hybrid • APIXELL s Strategy Automation • Artisan • DraaS • AzMigrate • ChatBots Migration SRE • AutoNote SIEM • RPA – Batch Process

Cost Design Management Enable CAF Services – Project Highlights

Financial services customer- AzCop, Pet care company- Automation/DevOps- CAB Aggregator- One of the largest Heavy on automation, COE Helpdesk, Terraform/Chef, Rackspace to Azure application migration from AWS to DevOps and AKS Migration/Modernization. Azure for payment gateway and cab booking and entire data platform.

Big 4 firms- Complete Global Networking, DRaaS, Local Advtertising Serving Platform- HEAVY ENGINEERING-Very large on- Cloud Enablement in Swiss and Germany, AzCop based prem to Azure migration with rigorous performance requirements to Self Service implementation, MSP for BAU, DevOps/AKS, generate advt. impressions with milli-second response. Worked with Complete cost management for Cloud. Microsoft Product teams and CAT teams to tune the Azure platform. BrainScale & Microsoft Co-Sell offers

Microsoft Cloud Adoption Framework • Microsoft CAF Workshop and Enablement

• Cost Optimization Assessment

• Cloud Readiness Assessment

• BrainScale is a part of Microsoft (AMP) program with the ability to migrate up to 500VMs or 100SQL instances at "no cost" to our customers; roughly a ~300k value Cloud Adoption Drives Business Value Creation

✓ New business lines ✓ Lowering Capex ✓ Growth spurts ✓ Improving IT utilization ✓ Time to market ✓ Lower people cost ✓ Increased automation Growth

✓ Business Continuity ✓ Security ✓ Disaster Recovery ✓ Audit ✓ Load Balancers Efficiency ✓ Governance tools

Resilience Compliance AZCop Business

Value Accelerates Cloud Adoption, time-to-market.

Automated Governance and compliance

Growth Empower application teams to leverage cloud securely

Reduces time and manual effort using automation and thereby saving costs. Efficiency

Resilience Compliance Compliance/Usage/Billing Dashboards

Internal Marketplace for blueprint based deployment Solution Overview

• Integration Capabilities with multiple Self-Service Portals . • Utilizes native azure tools like blueprints and polices to expand them at enterprise scale • Provision Guard-Rails for Cloud Resources for teams to focus on productivity than security and compliance • In Built Self-Service capabilities with ability to customize the dashboard • OS hardening workflow automation (works with any 3rd part CM tool like puppet, chef or custom script Extension) • Builds on top of Azure ARM Policies, Blueprints and Azure Management Groups Contrasting (With or Without AzCOP)

Project Workspace Provisioning

Enterprise Ticketing AzCop Bot Systems Development Teams Email Enterprise Development Teams Central IT AzCop Portal

Microsoft

Azure Project Workspace Provisioning

Enterprise Phone Development Teams After initial setup via AzCop portal, teams On-Premises ITSM

can hit Azure control plane directly. . .

• On-Premises practices adopted in the

cloud. CrAzCop Bot Enterprise Development Teams • Little to no support for modern DevOps • Create Subscription / Resource Groups • Obtain an Azure subscription / Resource Group for their project using AzCop processes or Infrastructure as Code on request. portal. practices. • Setup Virtual Networking components. • Teams can now get direct access to Azure Portal • Enterprise teams try to go around Central • Apply Blueprints to setup policies, RBAC. IT to get the job done leading to • Current compliance status to enterprise controls. unknown security risks. • Setup logging, monitoring and alerting • Internal chargeback costs. defaults. • Overwhelmed Central IT Team, result: • Access Internal cloud marketplace. provisioning time that runs into several • Listen on Azure control plane events. • Generate SOC / HIPAA etc. compliance reports. hours and days. • Value proposition of cloud unrealized. BrainScales IP Hero Solution - AzCop Az = Azure, Cop = “Protect & Serve” AzCop Customer Case Study • AzCOP will ensure the security of those services working Customer is looking to use Microsoft Azure, not only to move existing on-premise in the background. The groundwork is being laid ensure applications to Azure, but also develop new kinds of applications based on latest that all SOC compliance, internal chargeback, advanced technologies that are offered on the Azure platform. Before they embark on this effort, they monitoring, etc. are also brought into the fold in an would like to setup systems and processes in place that result in creation of secure and well- integrated fashion. governed Azure subscriptions and Resource Groups that applications teams can leverage. The creation and management of these subscriptions and resource groups should be carried out in a self-service fashion.

With the implementation of AzCop solution, internal customers and engineering teams were able to use the AzCOP’s portal to request Azure Subscriptions and Resource Groups for their specific projects. These requests are then being automatically put through an approval process, and the actual creation, modification and hardening is executed through AzCOP and the automation framework built in the tools framework.

Over the next several months, customer will continue to build on top of the AzCOP solution to build the governance and security policies that meet their organization’s InfoSec standards. This will then enable whitelisting several Azure services so that internal teams can directly consume those services without Central IT teams involvement. AzMigrate Bird’s Eye view on the Migration Journey R Factorization and Analysis of On-Premsis Assets Workloads preparation for cloud migration Live Migration Report and Projected Timelines Post Migration – Optimization based on ARC Artisan Reduce manual efforts to create/update Golden Image Business Value process for Windows & of Artisan Reduced time to create VM with pre-installed and configuration with Golden image

Always deploy compliant VM with required agents and services. Growth Updating Images with additional configuration changes is faster

Efficiency Compatible with all Major cloud platforms to have

Resilience Compliance golden image.

IT and business can collaborate on Golden Images. Solution Overview

Packer Packer file CI/CD Pipeline provisioners

Auto Register with Publish Image to Azure Update New VM spin up shared image Management gallery

VMs receive Push periodic Post VM creation updates updates on a schedule task Before Artisan After Artisan Cost Analytics Azure billing data for entire Organization and not Business Value limited to single tenant Highly customized reporting requirements for management/business teams

Chargeback possible both at Subscription and Resource Group level

Growth Billing/Chargeback to Application Teams/Business

Efficiency AHUB/Power Scheduler/RI based cost saving report

Resilience Compliance

internal Mark-up and integration with internal charges (like WAF) Azure Billing data pulled in from EA Portal daily and this billing data processed via Hadoop dynamic cluster for Markup processing

System access controlled via Azure AD accounts and also via Azure AD Groups (like for Admin)

Owners view the Azure and internal charges side by side, as if coming from single source, and they can delegate rights to anyone to view their dashboard

Solution Owners can manage the charge codes and other meta data like application Overview name, escalation contacts etc.

Credits can be loaded in the solution

Regional view available to help during Azure outages

Service Line view of subscriptions available for subscriptions/resource groups Azure billing and Azure and internal chargeback at an charges in one place enterprise level Contrast (with/without

Detailed view the solution) Easy view of provides resource subscription/resource level data to slice and group causing cost dice data according to spike for owners needs Demo Disaster recovery as a Service Business Value Business continuity for Mission Critical Applications for Enterprise

Prevents enterprise from losing revenue (and firm reputation) during disaster scenarios

Help with Compliance and Auditing requirements

Growth Cloud Scalability/Flexibility/Pay as you Go model for DRaaS

Significant reduction in Cost for (staging) DR hardware due to Cloud Efficiency native services and features (reduced ROI)

Resilience Compliance Use of Native PaaS functionalities which has DR/HA built in the service

Tests are simplified through ready-to-use cloud services that allow systems to be tested in parallel with production systems (minimize downtime during DR Drill) Service Overview

• Establishing appropriate DR tiers and identifying service framework including BIA (Business Impact Analysis) • Design of new Applications with DR/HA built-in using Cloud Native services • Comprehensive assessment of existing Applications and its & Recovery status • Creating a comprehensive Cost Estimate for Business for DR Solution • Creating Architecture diagram and Implementation of DR solution • Mock DR drill to validate RTO/RPO • Real DR Drill for readiness (Failover/Failback) • DR Postmortem Report • 60+ Applications DR’d in last 2 years Contrasting - With or Without Cloud

Traditional Disaster Recovery On-Prem to Public Cloud Public to Public Cloud

Microsoft Azure Disaster Recovery / High Availability

Replication Channels Orchestration and Hyper-V Replica, SQL Replication channel: InMage Scout AlwaysOn , ASR

Replication channels Production

VMware SRM Primary Hyper-V SQL AlwaysOn, Hyper-V Recovery Primary Hyper-V Site VMWare SAN VMWare Site Site Physical l VMWare Physical

• Hardware at DR site Staged • Warm or Hot Recovery , ROI minimal , • Warm or Hot Recovery , Near Zero (Cold/Warm/Hot) Only storage cost RTO/RPO • Low ROI , cost increases (Cold->Warm- • Orchestrated Recovery • DR/H/A by Design >Hot) • Use of Cloud Native functionality • Use of Cloud Native functionality (most • Not Scalable/Complex Solutioning • Minimal migration curve when PaaS Services has DR built in) Application migrates to cloud • DevOps practices leveraged ExampleArchitectureDiagram

Case Study

• Large EY Sharepoint based Platform (EY Absolute) • Combination of PaaS and IaaS Services • Gold Tier Application RTO 24 Hrs , RPO 4 Hrs • Complexities addressed around IAM/Networking/Security/PaaS solutions • Like to Like DR environment cost $106K (Running Cost during real DR scenario) • Cost with ASR $23K (Protection Cost during normal business scenario) • Total Savings $83K (82% ) AzAssist BOT Framework Business Receive proactive notifications over a communication Value channel – Subscription based

Activity reporting to specified teams and appropriate workflow channels

Growth Helps in taking preemptive measures on azure resources (write or update) through BOT Conversation.

Efficiency Managing of azure resources by monitoring and triggering pre-configured action on it Resilience Compliance

Get individual / Group azure resources cost report. Solution Overview

• AzAssist is based on Microsoft’s bot framework integrated into Microsoft Teams • Integrated with Azure Monitor to receive existing subscribed alerts • Proactive Messaging to Individual Users or Configured groups • Scales at real-time, no explicit infrastructure requirements • The BOT can perform Read/ Write / Update operations on Azure Assets • Based on the role-based access to azure resources, All the cost metrics can be requested • AzAssist can integrate with other collaboration platforms like Slack, skype etc. Yammer Analytics Business Provides insights on employee Value engagement which drives effective business decisions.

Growth Analyze employee collaboration in the yammer groups.

Efficiency

Resilience Compliance Provides trends on individual employee’s sentiment by their geographic presence, individual business units and projects Customer Case Study

• Brainscale implemented Yammer Analytics for an Enterprise customer to study the employee pulse. • The insights gained by implementing yammer analytics spanned across different areas. • Trend analysis • Sentiment Analysis for company publications • User behavior analysis • Collaboration time spent • Identification Positive champions. • Employee contribution towards knowledge sharing and innovative pilot solutions • Survey Analysis for internal market research • Summary of organization strength – Attrition rates etc. • The solution is completely based on PaaS and serverless components on Azure • With a comprehensive executive dashboard based on PowerBI the decision makers were able to quantify metrics in near real time.

41 Multi Cloud & Hybrid Cloud Enablement Business Performance Value Faster Time to Market

Geographic Reach

Growth Compliance

Extended Capex to Opex

Efficiency Resilience Resilience Compliance

Utilize IT infrastructure investment until EOL

Customer Technology preference • Cloud Advisory for MultiCloud Foundations and Strategy evolution • Network Layout for Public- Private – Hybrid Scenarios • Centralized IAM for access management to multiple clouds • Resource Tagging Service • Multi Cloud Billing • Unified InfoSec Policy extensions to Multi Cloud/ Hybrid Capabilities Cloud scenarios • Continues compliance frameworks for remediation for InfoSec Violations • Centralized SIEM tools ( Sentinel, Splunk, ELK) • Centralized Self Service Capabilities • Unified Automation through open source tools ( Ansible, Terraform) Avoid Cloud vendor Lock-In secnarios

Better Pricing negotiations with cloud vendors

Multi Cloud Performance Benchmarking to choose from best Benefits assets available from cloud vendors

“Most organizations adopt a multicloud strategy out of a desire to avoid vendor lock-in or to take advantage of best- Eliminate Shadow IT - influenced by decision makers of-breed solutions,” he says. “We expect that most large organizations will continue to willfully pursue this approach.” – Gartner

Leverage best solutions from heterogenous clouds Thank you