IBM Information Infrastructure Solution

Agenda 資訊時代的問題 介紹IBM資訊基礎架構 資訊可用性 資訊安全性 資訊保存性 資訊遵從性 下一步建議

經營綜合報告 許多客戶都經歷了資訊的快速增長，必須向用戶提供持續可用的資訊，且資訊保護而不被濫用。 IBM資訊基礎架構能夠幫助客戶發展他們的環境，以更好地管理增長，增加服務等級，滿足法規遵從的要求，並降低總成本。 IBM資訊基礎架構幫助客戶圍繞4個核心領域提升能力: 資訊遵從性 (Compliance) 資訊可用性 (Availability) 資訊保存性 (Retention) 資訊安全性 (Security) 客戶案例，如下: Zappos.com, 網路零售商 某家美國大型金融服務公司 某家美國醫療保健福利公司 Hansgrohe,一家中型的全球製造商 IBM資訊基礎架構的硬體，軟體和服務，正確的資訊在正確的時間安全的提供，使企業可以作出更及時和準確的決定，滿足客戶商業價值。 IBM資訊基礎架構是多平臺，優化的主機、電源和模組化系統。 IBM Information Infrastructure Client Introduction, April 2008

保留 安全 可訪問性 版本控制 數量和品種 基礎架構. . . 資訊時代 資訊挑戰 保留 安全 可訪問性 版本控制 數量和品種 基礎架構. . . 業務挑戰 全球化 合併 風險與遵從 客戶忠誠度 業務費用 商業速度 . . . 資訊是一項 戰略資產 Organizations face an increasing challenge managing information 60%+ of CEOs: Need to do a better job leveraging information Employees spend up to 70% of their time looking for information For most organizations, Information has become a Strategic Asset Best Practice: 5x more value created by leveraging information assets Common Practice: Employees spend too much time looking for information 組織有效利用資訊 可以創造5倍以上的價值* * Based on IBM internal studies and estimates. Sources: IBM? Attributes & Capabilities Study, 2005; Client Interviews 2004; IBM CFO Study, 2006 4 4

資訊爆炸式的增長 到2010年，產生和被複製的資料預計複合年增長率高達57 ％ 其中80%是非結構化資料，如電子郵件、圖片和影像等檔80% 2005 2006 2007 2008 2009 2010 到2010年，產生和被複製的資料預計複合年增長率高達57 ％ PB shipped 其中80%是非結構化資料，如電子郵件、圖片和影像等檔80% Structured Unstructured Much of the Information growth is coming from unstructured information, mostly email Emerging data types (images and video) create new management challenges Source: Various external consultant reports

資訊挑戰 This explosion of unstructured data truly making you transform the way you do business 3 primary drivers: I have to store it – I want to store it – I can’t store it –

成功管理資訊的關鍵能力 資訊基礎架構必需專注於… 資訊可用性 減少聲譽風險和審計缺陷 資訊合規性 在遵從性排名上，63%的IT主 管首要的挑戰是法規遵從 提供資訊持續、可靠的訪問 在某些行業停機時間的成本可以高達 收入的16%. 資訊保存性 保護和實現安全的資訊共用 資訊安全性 84 ％的安全漏洞來自內部的 消息來源 IBM Information Infrastructure is an initiative that helps clients meet the challenge of Information Explosion by helping to improve competencies around 4 key areas: Information Availability Information Security Information Retention Information Compliance Core competencies enable “Data Tone” or Information as a Service. Information Infrastructure is a supporting technology for business applications 支援客戶資訊保存策略 平均法律揭露的要求，組織成本 可以達到15萬-25萬美元 Sources: CIO Magazine survey 2007; IBM Tivoli Market needs and profiling study 2005; The Costs of Enterprise Downtime: NA Vertical Markets 2005" Information Research; IBM Market Intelligence

IBM專注客戶的資訊需求 為資訊按需供給提供資訊基礎架構解決方案 What’s needed is an Information Infrastructure that not only adapts easily, but one that can help clients realize more business value from information. Information Infrastructure must deliver information on demand, and also the security and resiliency to manage business risks. = = = = Background: We will go into greater detail on our strategy to address the challenges our clients face, and an overview of the product line. The underlined statements make up our “value statement”: Intelligent Management. Protected Information. Smarter Insights. Note, do not confuse this “value statement” with “tag-line”. The official tag-line for all IBM Systems, including IBM System Storage, is “Simplify your IT”. IBM公司能夠幫助客戶了解資訊的業務價值，輔以靈活的基礎架構，安全地存儲資訊和減輕經營風險

IBM資訊基礎架構包含… 統一存儲和安全管理軟體 IBM 資訊基礎架構 全面的磁碟，磁帶和儲存網路硬體 綜合商務解決方案 可見性，控制，自動化 虛擬 可用性，簡易性 保護 安全性，遵從性，可恢復性 最佳實踐和服務 歸檔 活動的，非活動的 (長期) IBM 資訊基礎架構 整合 統一存儲和安全管理軟體 全面的磁碟，磁帶和儲存網路硬體 綜合商務解決方案 深厚的專業知識和行之有效的最佳做法 靈活的融資 Unlike other alternatives, IBM offers an Information Infrastructure that is: Standards based, to fit easily and adapt to change Comprehensive, covering all aspects of Information Infrastructure Based on Best Practices and successful client engagements IBM Information Infrastructure includes unique capabilities that deliver more value: Integrated Business Transformational Solutions Unified Management Software Comprehensive Tape, Disk and Network Hardware Deep and Proven Industry Expertise Flexible Financing Options

IBM資訊基礎架構被驗證的能力 管理資訊風險 資訊可用性 電子取證，分類 可調的服務級別 資訊生命週期管理 資訊遵從性 減少聲譽風險和審計缺陷 提供資訊持續、可靠的訪問 異質平台儲存虛擬化 統一管理控制臺 資料遷移服務 數據和介質加密 安全訪問控制 持續資料保護 資訊安全性 保護和實現安全的資訊共用 資訊保存性 IBM Information Infrastructure is an initiative that helps clients meet the challenge of Information Explosion by helping to improve competencies around 4 key areas: Information Availability Information Security Information Retention Information Compliance Core competencies enable “Data Tone” or Information as a Service. Information Infrastructure is a supporting technology for business applications 支援客戶資訊保存策略 優化，有效的分級儲存 資料重複刪除，壓縮 集成的歸檔解決方案

資訊可用性 可見性；自動化；控制 推薦方法： IBM資訊基礎架構經過驗證的實力： 1: 彈性架構：均衡高可用性設計中的最佳方法 2: 虛擬異質平台儲存系統：消除資訊孤島 3: 整合不同的管理工具：提升生產力 4: 自動運行任務：最小化人為錯誤，提高性能 IBM資訊基礎架構經過驗證的實力： 異質平台儲存系統虛擬化：IBM, EMC, HP等 集成高可用性的磁片和磁帶解決方案 統一的儲存管理控制臺 兩站式和三站式的資料複製容災 資料備份和恢復的存儲軟體 Step 1 Virtualization: SVC is lead product. VTS, newer SAN Switches, SOFS, TSM, and N series also have a virtualization play Step 2 Console: SSPC manages SVC, DS8000, and TPC products now, more throughout 2008. Step 3 Resiliency: Extended distance replication just became more affordable. Hurricane Katrina made it mandatory. Global Mirror, Metro Mirror, Metro Cluster, GDPS are lead products. Inside the data center, flash copies are supported by SVC, DS8000, N ???Step 4 Automation: Provisioning: TPC; Backup: TSM; Data Migration: TPC-R, TSM, SVC, XIV = = = = = = Background Information Availability Given Information Explosion and flat staff growth, Clients have to get more efficient every year, just to break even on Availability levels Improving Availability takes a fundamental shift: Automate existing tasks Assist staff with more valuable tasks IBM Information Infrastructure helps clients with both; leveraging leading technology and services Information Availability consumes half the typical Storage staff budget in F1000 companies Source for Storage Staff Time Spent: InfoPro, Wave 10, Fall 2007. 50% of time is spent on the following tasks, in order: Storage Provisioning Data Migration Backup & Restore Troubleshooting “55% of unplanned server outages occur from unavailable disk space” Source: SNIA/Source Consulting Availability Examples: The redundant component design of the DS8000, which prevents single points of failure for mission critical applications. Dynamic provisioning in TPC and N series helps keep applications available. 動態 共用 簡化

Zappos.com, Inc. IBM資訊基礎架構提升資訊可用性 IT架構不能與公司超過100%的年增長率並駕齊驅 每台伺服器手工安裝和測試 手工配置變更需要花費幾小時 解決方案 遷移到新的企業級數據中心 技術更新 整體解決方案的組件: 存儲: N 系列閘道，含Snapshot快照, DS8300磁碟陣列 伺服器: BladeCenter刀片伺服器 服務: Sycomp, IBM一級代理 成效 每天可處理近 20,000 網路訂單 通過N基於iSCSI的Snapshot快照，5分鐘內可以部署一台新的Web伺服器 提升系統性能 維護簡單 定位公司以適應指數級的增長 = = = = Background: http://www.sycomp.com/pdf/zappos_case_study.pdf Sycomp customer reference page: http://www.sycomp.com/customers/customers.html Profile provided by Sycomp, April 2008 Founded in 1994, Sycomp is a leading provider of innovative IT solutions and an IBM Premier Business Partner. We have a proven track record of delivering solutions that help clients across a broad range of industries reduce costs, improve profitability, a???!= = = ==

資訊保存性 IBM資訊基礎架構解決方案幫助降低TCO超過50% 推薦方法: 1: 資訊保存需求與歸檔架構對應: 減少成本和能源消耗 37% 的資料過期或非活動狀態 2: 未來驗證: 確保長期資料可訪問性 83%的受訪者保存資料50年，或者更長時間 IBM資訊基礎架構經過驗證的實力: 結合磁碟和磁帶存儲，提升能源效率 資料重複刪除軟體 集成的歸檔解決方案 電子郵件歸檔, 資料庫歸檔 跨平臺的線上資料遷移服務 活動 數據 參考 12% 開發 法律 財務 人力資源 廣告 電子郵件 Information Retention Retention periods often exceed the life of media and equipment. Archiving is a Best Practice to help applications run better and to control costs. IBM Information Infrastructure is multi-tiered, so customers can archive to lower cost storage; and automated, to simplify data migration. = = = = = Background: Tiered Storage Management examples: SVC with TPS and SSPC; TSM; SOFS hybrid disk/tape options include: DR550, TSM, DFSMS, VTS, and SOFS Hybrid solutions lower TCO by over 50%, compared to all-disk solutions (see TCO slide in Strategy presentation). Tape in a vault takes no power, of course. Advanced Copy Services, from TPC-R and SVC, (and migration utilities in TSM) help migrate data across media, IBM and non-IBM SNIA 100 Year Archive Requirements Survey January 2007, 276 respondents ARMA and SNIA members 83% surveyed keep some data 50 years or more, page 33 37% of data is expired or inactive, page 47 SNIA source: http://www.snia.org/forums/dmf/programs/ltacsi/forums/dmf/programs/ltacsi/100_year/100YrATF_Archive-Requirements-Survey_20070619.pdf 非活動 25% “...長期資料保存和維護來看，與磁碟相比，磁帶仍然是不昂貴的，並且磁帶電源及冷卻系統的效率超過磁片." Source: Addressing Archiving and Retention Challenges In the Government Sector, Heidi Biggar and Brian Babineau, Enterprise Strategy Group, March, 2008 過期 12% Source: SNIA Data Management Forum, 100 Year Archive Requirements Survey, © Storage Networking Industry Association (SNIA), 2007 * TCO estimates based on IBM internal studies comparing SATA disk to blended disk/tape configurations.

大型美國醫療保健福利管理公司 IBM資訊基礎架構提升資訊保存性 病歷要求保存時間為病人壽命 + 2年 要求支援大機和分散式系統 安全且易於使用 無法確保離開資料中心的資訊安全 解決方案 新一代病歷歸檔系統 整體解決方案的組件: 應用軟體: IBM 密鑰管理軟體Encryption Key Manager (EKM), Java RJE/SDK 1.4.2 SR6, Tivoli Storage Manager 硬體: TS1120 型號 E05 磁帶機含加密功能, TS3500 (3584) 磁帶庫 服務: IBM 全球服務 成效 提升客戶保密性. 對長期歸檔的資訊實施密鑰管理和介質加密. 將 200,000 盤磁帶轉為加密介質. 提升效率. 120個低效能的磁帶機退役 7個Sun的磁帶庫退役. = = = = Background: Source: Customer’s internal presentation. IBM agreed to not reference the customer name. "Encryption Customer Experience one pager 071707.ppt“, from Brad Johns

資訊遵從性 靈活; 自動化的; 易於審計 推薦方法: IBM資訊基礎架構經過驗證的實力: 1:採取適當的系統和流程來保存記錄和email 通過員工規則來有效溝通 2: 對於過期資料的銷毀制定程式 消除風險，超過保存期的資料而言，降低成本 3: 流程自動化: 避免人為錯誤 IBM資訊基礎架構經過驗證的實力: Compliance Warehouse 基於策略的資料管理 基於策略的資料覆蓋保護 法規遵從服務 受保存的，高速，離線儲存 Information Management：IBM Compliance Warehouse for Legal Control 可協助企業在達成、維持及證明符合環保規範之際，同時減低作業的成本、複雜度與風險。為協助企業符合未來法律及環保規章的要求，客戶可採用能收集、分析、追蹤、顯示與報告所有資料和能源使用狀態的軟體方案，來輔助並簡化相關流程，如 Cognos 8 BI 和 IBM Compliance Warehouse for Legal Control；此外，Tivoli Usage & Accou??毈Legal Discovery and Hold Order requirements Maintain adequate systems and procedures for records preservation, including email Effectively communicate Hold Orders to employees Produce requested records in a timely manner Information Management：IBM Compliance Warehouse for Legal Control 可協助企業在達成、維持及證明符合環保規範之際，同時減低作業的成本、複雜度與風險。 Business requirement to destroy expired data Cost of reviewing documents past retention periods Millions of ‘past their retention’ credit card records hacked1 IBM field-proven capabilities Sources: 1. InformationWeek, 2007 Failure to comply with Discovery and Hold Orders causes legal problems: Criminal example: Willful destruction of electronic documents and e-mail in the face of pending legal Discovery Auditing business closed, $500,000 fine. Arthur Andersen. Behavior doesn’t need to be criminal to cause legal problems: 1. Destruction of records when under a court ordered Records Hold Order; and not having an effective system for communicating Hold Orders to employees. $1,000,000 fine. Prudential Board Chairman 2. Failure to maintain adequate systems or procedures for the preservation of electronic mail communications. $2,100,000 in fines and penalties. J.P. Morgan Securities Inc. 3. Failure to produce requested e-mails in a timely manner $8,250,000 fine. Five US securities broker/dealers Keeping records too long is bad for business, too: Cost of reviewing documents that were past their retention periods: $12 million per year. DuPont Millions of credit card records hacked, which were past their retention periods. Total cost TBD. TJ Maxx In the US, judges have been levying larger fines for smaller Compliance offenses. = = = = = Background: Keeping records past their expiration date causes business risk and has no business benefit. TJ Maxx source: Information week, January 29, 2007, TJX Stored Customer Data, Violated Visa Payment Rules Litigation and prison sentences related to corporate malfeasance: ■ Four executives face prison terms of up to 10 years (in addition to $250,000/person fines) for their concealment and destruction of documents related to potential price fixing at The Morgan Crucible Company (a United Kingdom industrial materials manufacturer). Regulatory investigations, lawsuits and very large fines: ■ Arthur Andersen had to close its auditing business (and was fined $500,000) because a court found that it had willfully destroyed electronic documents and e-mail in the face of pending legal discovery. ■ The Chairman of the Board at Prudential Insurance was fined $1,000,000 because employees were destroying records when the company was under a court ordered records hold order – due, in the judge’s opinion, to the company not having an effective system for communicating a “record hold” to its employees. ■ Five securities broker/dealers were fined $8,250,000 for failure to produce requested e-mails in a timely manner. ■ J.P. Morgan Securities Inc. agreed to pay penalties and fines totaling $2.1 million when the SEC determined it lacked adequate systems or procedures for the preservation of electronic mail communications.

Hansgrohe AG IBM資訊基礎架構提升資訊遵從性 缺乏對法律發現要求的快速回應能力 2,000 信箱, 每天郵件量 30,000 (3 to 5 GB/天) 法律要求歸檔保存10年 小規模的IT人員需要自動化的解決方案 解決方案 市場客戶的Email歸檔, 保存, 和恢復解決方 案 整體解決方案的組件: 應用軟體: CommonStore, eMail Search for CommonStore 硬體: x 伺服器; DR550 儲存系統 服務: IBM全球服務 成效 確保遵從性，從發現訂單避免處罰和判決，及時出示電子郵件來評判 跨信箱的搜索，適用於多種法律要求保存的關鍵email，確保email保存期限 減少email和附件多餘消耗 Hansgrohe AG is a global manufacturer of upscale plumbing fixtures, with manufacturing plants in Germany and Michigan in the USA. Hansgrohe AG was searching for an email archiving solution, due to American legal requirements for compliance: All outgoing e???! Hansgrohe war auf der Suche nach einer Email-Archivierungsl?sung, die den hohen amerikanischen gesetzlichen Anforderungen gerecht wird: Alle eingehenden und ausgehenden eMails schnell und gesetzeskonform zu archivieren und entsprechende Such- bzw. Zugriffs???! = = = = Background:

“ ” 資訊安全性 加密; 資料保護; 訪問控制 自1960年以來資料保護的先鋒 IBM保密研究所 最值得信賴的保密技術公司 市場上第一個提供磁帶加密 完整的解決方案 IBM資訊基礎架構經過驗證的實力: 不可移除和不可改寫的存儲（Non-erasable, non-rewritable-NENR） 加密的磁碟和磁帶系統 持續的資料保護 訪問和身份管理 資料安全服務 “ What separates IBM from the pack is its ability to provide a complete and extensible Enterprise Tape Encryption architecture, including an enterprise key management capability. ” Information Security One of the oldest and most trusted names in Security Security requirements drive Storage decisions. IBM leads in media encryption and security management software Field-proven capabilities include: - Encryption (tape, disk partnerships, key management, etc.) Encrypted media, LTO4 and TS1120: Key Management supports secure delegation of authority - Security Management Solutions: Access Manager: Let clients in. Keep hackers out. Identity Manager: Manage passwords and entitlements Privacy Manager: Automate Auditing ISS (Internet Security Services), Threat detection and prevention = = = = = = Background: Improving Data Privacy for Compliance and Risk Mgt. Costs continue to rise for disclosure of private information. Improve Risk Management and Compliance through Privacy enforcement at the Information Infrastructure level IBM Privacy Leadership: Device level encryption with key management improves security and enables delegated authority. Common encryption model for disk and tape Industry leading Access and Identity Management with Tivoli Security software Client and Server encryption in Tivoli Storage Manager Multiple Encrypted Storage options for data privacy: DR550 LTO4 and TS1120 Tape Drives with encryption option Consulting Services are available: IBM Governance and Risk Management Services IBM ECM Services Tivoli Lab Services Slide Source: Joe Miceli, Data_Protection_Sept_27.ppt ESG Source: http://www-03.ibm.com/systems/storage/news/center/data_encryption/pdf/banking_tape_encryption_wp.pdf Enterprise Tape Encryption Requirements for the Banking Industry, Jon Oltsik, Enterprise Strategy Group, August 2006 Jon Oltsik Enterprise Tape Encryption Requirements for the Banking Industry, Enterprise Strategy Group August 2006

跨國金融服務供應商 IBM資訊基礎架構提升資訊安全 遞送服務時磁帶包裹錯誤投遞，安全漏洞 恢復丟失資料的高成本 加密的開銷必需不能影響應用系統性能 介質的高成本 解決方案 新的介質加密解決方案 整體解決方案的組件: 系統 z 綜合密鑰, 策略和安全管理系統 硬體: 371 IBM TotalStorage 3592 企業級磁帶機， 41 控制器, 10 IBM TotalStorage 3584 磁帶庫，60 擴展磁帶櫃, IBM directors和新的 FICON介面 成效 降低業務風險；減少安全漏洞曝光 快速、可靠，256位加密 能夠並行的磁帶加密 加密前壓縮，減少介質費用 In early 2006, Customer began working with IBM to develop a tape encryption solution. The partnership resulted in a solution that adds encryption hardware to IBM physical tape drive units so that each tape drive can independently encrypt or decrypt data st???"= = = = Background: Security customers do not typically provide their names, as a matter of security policy. Source: "Global Financial Services Provider Encrypts Data.ppt", Allen Marin | IBM System Storage Marketing | 919.486.2803 | T/L 526-2803 | amarin@us.ibm.com | Mobile 919.522.5005

IBM伺服器環境的優化 共同建置 協同運行 在每一階段伺服器與存儲的整合 跨平臺可攜性的簡單化 更好的擴展能力和性能 IBM 資訊基礎架構 管理 可見性，控制，自動化 虛擬 可用性，簡易性 保護 安全性，遵從性，可恢復性 最佳實踐和服務 歸檔 活動的，非活動的 (長期) IBM 資訊基礎架構 整合 在每一階段伺服器與存儲的整合 設計 開發 測試 客戶支持 跨平臺可攜性的簡單化 更好的擴展能力和性能 At IBM, server and storage know-how come together to build the best solutions. IBM gives customers the best of both worlds: - Standards based solutions - Built to work together = = = = Background: Mainframe IBM 伺服器平臺 Power Modular

與IBM合作的原因 廣泛的，完整的儲存組合 領導加密的創新，安全密鑰管理，訪問控制技術 第一大儲存虛擬化供應商，支援多家儲存廠商的虛擬化技術，銷售了超過12,000 SAN控制器引擎 在主機平臺業界領先的資訊基礎架構 全球最大的儲存服務團隊；數以千計的客戶 顯著的TCO Broadest, integrated portfolio: Clients can work with one vendor Market leader in disk, tape, storage services Encryption First media encryption performed by the drive (minimizes overhead, maximizes control) Industry partnerships (Seagate, LSI) Integrated tape and disk media encryption Virtualization First major vendor with ability to virtualize information infrastructure across multiple vendor technologies Supports EMC, HP and Hitachi Over 10,000 SVC engines sold over 5 years Standards-based interoperability. IBM contributed the SNIA standard. Mainframe: Market leader in disk and tape 50 years of mainframe storage experience Leading integration for multi-site data centers Best practice services based on thousands of client engagements Almost 3x larger than the next biggest competitors Comprehensive services offerings Outstanding TCO, with flexible warranties 3 year warranty is an advantage to many customers and partners, since it matches the technology life cycle. = = = = Background:

採取的下一步驟 異質平台儲存虛擬化 實施分級存儲架構 將法規要求的記錄遷移到受保護的存儲上 採用加密來擴展資料保護 資訊可用性 異質平台儲存虛擬化 實施分級存儲架構 資訊保存性 將法規要求的記錄遷移到受保護的存儲上 資訊遵從性 採用加密來擴展資料保護 資訊安全性 訪問 www.ibm.com/storage 獲取更多資訊 參加IBM資訊基礎架構Workshop or Information Lifecycle Management assessment 下載IBM資訊基礎架構業務影響指導 Let me summarize - At the end of the day – you still have to store it; you want to store it; and there are many forces making you say “I can’t store it.” Your next generation information infrastructure must be able to easily integrate new technologies, ensure security at all times, and be “green”. You should partner with a vendor with the vision and ability to execute the next generation information infrastructure