as part of Atos’ Hybrid Cloud Services Customer Presentation Managed Public Cloud as part of Atos’ Hybrid Cloud Services Customer Presentation

Overview

Customer Digital Transformation Challenges Master technology & skills to reduce cost, create new business-value and improve productivity Seamlessly utilize both Private and Public clouds Transform, build and manage business-apps & data analytics across multiple clouds Consolidate the management of disparate IT services

Atos’ Hybrid Cloud Platform supports the digitization a rich, extensible, fully intercrossing ecosystem [2] Technology Framework Services Integration & Operations Service integration of cloud & traditional-IT to enhance productivity & service quality Services Integration & Operations Applications Orchestration Platform Innovative open platform to build, deploy & manage business applications in multiple clouds Applications Orchestration Platform Cloud Foundry Hybrid Cloud Platform IaaS Aggregated hybrid cloud infrastructure, for reduced cost with performance & location flexibility Hybrid Cloud Infrastructure Hybrid Cloud Infrastructure Extensible big-data analytics platform to create business analytics insights Data & Analytics Platform Data & Analytics Platform (Virtual) Private Cloud Managed Public Cloud intercrossing ecosystem

Customers can use Hybrid Cloud Infrastructure as part of the Atos Hybrid Cloud Platform Atos offers both: Private Cloud: and Digital Private Cloud Enterprise Private Cloud (EPC) Enterprise Private Cloud – Microsoft (EPC-M) Digital Data Center (DDC) Virtual Private Cloud Cloud Infrastructure Services (CIS) Trusted Agile Infrastructure (TAI) Hybrid Cloud Infrastructure (Virtual) Private Cloud Public Cloud*: AWS Azure * including Atos Value Added Management Services on top of the plain public Cloud IaaS

The situation

Public Cloud Change the Business - I Customers are confronted with the increased usage of public cloud resources from their own developers or their competition which are deriving business benefits by using these resources. The main driver which allows public cloud usage are: Application Needs An increasing new Type of applications require a new type of hosting and management. Public cloud provides provide the technic and automated interface to support this. Especially the agility and on demand availability is of interest for these types of applications, rightsizing to the needed performance can easily be automated. To find the best solution for the new type of applications and the grade of interaction with public cloud resources: Cloud expertise is needed Customers need to look for the right cloud, to support specific application requirements at the right cost level. This leads to the usage of more than one public cloud provider which have to be managed and controlled. To keep control of the “on demand” usages which bills are to a wide range unpredictable,

Public Cloud Change the Business -II Challenges for Customers arising out of public cloud usage as: Customers are loosing control Employees use Public Cloud functionality to increase speed on their projects by simply using Company credit card. Created Environments do not follow company standards with regards to security and compliancy Missing maintenance and monitoring of these environments could raise immense damage by loosing intellectual property, being infected by trojans,… Customers are not being prepared. Current employed IT is not able to operated cloud as being organized in silos and current role models do not fit to cloud operations having not the right toolsets to manage public clouds efficiently having no integration to a business portal to control cloud consumption needed to be trained for any public cloud used

Customer’s Responsibility in the Public Cloud Customers are completely responsible for the design, security and integrity of their environments. Public cloud provider are delivering the enabling technology but do not define any measures above their physical level. Everything logical has to be defined, designed, monitored and managed by the customer. Data Center Infrastructure Operation of Physical Infrastructure Virtual Infrastructure Compute Storage Network Operation and Configuration virtual Machines Operating Systems Virtual networks Virtual Firewalls Hyper-visor Mgmt. env. Applications Data Public Cloud Provider Responsible for Operation Security Availability of infrastructure resources Logical Level Physical Level Shared Responsibility Security: Encryption, Integrity, Authentication, Identity and Access Management for Virtual Systems, Data, Applications and Network Connections, Customer operations Responsible for Operation, Security, Compliancy of Applications Atos Responsibilities   Application infrastructure is normally built up using a number of complementing technologies in layers. In AWS this is no different, however the makeup is somewhat different. All traditional DC infrastructure (Hosting, Power, HVAC) plus supporting DC infrastructure such as Network, Storage, Server, and Hypervisor are in the DC Infra layer and managed by Amazon AWS. However, to provide a rich feature-set and allow a high degree of customisation by customers some new configuration aspects are introduced which require management by specially trained staff, whilst some traditionally advanced network services (such as load balancing) are also introduced into the same layer and team. Furthermore some additional complexity is introduced due to AWS limitations relating to inter-VPC connectivity and VPN. The new team is referred to as the AWS Console Team. The following diagram shows the split in responsibilities, and therefore the implementation of IAM rules will reflect this separation accordingly.

The services

Managed Public Cloud (MPC) The Service The MPC service offers the management of public cloud infrastructure, up to a level where customers can focus on application management only. MPC Variants allow the choice of “how much” management shall be offered by Atos.

Managed Public Cloud Service - Overview Managed High Complexity Backup Customer Server Migration Customer Federation Solutions Managed Customer Connectivity (VPN or Direct connect) Customer Image Management Atos Cloud Consultancy Services C – Instance Management “Managed Environment” As per package B Service Now Service Catalog Management of Firewall policies Monitoring Customer Image Management Chargeable Options B – Infrastructure Management “Standardized Environment” As per package A Specific solution design VPC Configured according customer agreed specification Customer has flexibility to adapt as needed A – Foundation “Sandbox” Dedicated Customer AWS Account issued IAM Account Provisioned for usage Consolidated Billing and Reporting Expenditure Threshold Alerts Security logging configured

MPC Service Variant A – Foundation Package A - Foundation Foundation service is an entry level service. Accounts are provisioned, and access provided to those who need it. Secured Root Account Customers have full control of their accounts through the usage of (IAM) user accounts and can tailor the environment as they see fit. basic support, advice, or configuration suggestions. Centralized Billing and Reporting This package is intended to be offered to customers who need support with a defined process to place incidents for multiple clouds Want to control and monitor the number of Cloud Orders and consumption

MPC Service Variant B – Infrastructure Management Package B - Infrastructure Management Creation and management of a standard virtual network environment by using a cloud front script with aMinimum of two availability zones Public Subnet, Private Subnet, Internet Gateways, Base Security Groups , VPN Connectivity, NAT Gateways (optional) customer receives cloud-roles to mange additional services via cloud console1st LVL and 2nd LVL help desk solving support issues Change management to or the cloud environment Regular Service Reviews Technical update information Enhanced financial monitoring This package is intended to be offered to customers or internal Atos services, with own deployment methods for virtual machines, using the native Cloud API (like compose), but need a reliable and secured managed network infrastructure.

Service Variant C – Managed Instance Instance Management via Portal-SSRs by the instance owner Implementation of Approval workflows CMDB integration Integrate Instance into management framework administrative credentials owned by customer Monitoring and Management of the instance Patching via Cloud provider updates This package is intended to be offered to customers or internal Atos services, which will only focus on the Operating System and Application requirements. Business Workflows and CMDB integration will deliver the baseline for additional optional services like Manage OS on top of package C.

Infrastructure Management Infrastructure Management Managed Public Cloud Service Variants / Mandatory Packages and Optional Modules Rich Choice: three mandatary Service Packages and Optional Modules Packages A B C Foundation Infrastructure Management Instance Management Enablement ü Basic Financial Management û Account Management Cloud Assist Atos Rapid VPC VPC Enhancement Cloud Review ITIL management and control Orchestration of Common Functions via AWS API Trusted Technical Experts Packages A B C Foundation Infrastructure Management Instance Management Atos Cloud Consultancy Service  Proactive Security Log Analysis Customer Image Management û ü Managed Customer Connectivity Customer Federation Solutions Customer Server Migrations Managed High Complexity Backup OS Management, Monitoring & Reporting and Compliancy Service Packages Optional Modules

Benefits

Service Benefits For IT - Managed Public Cloud is provisioning: Secured Public Cloud environments to internal business customers. Integration into Atos hybrid cloud which allows optimal workload placement. Reduces complexity as only one interface for various public clouds are needed Control over public cloud environments with centralized reporting and billing for all provided clouds. A portal with integrated approval workflows that allows control of cloud usage. Offers an end to end managed Public Cloud solution. For business the solution enables: Digital innovation. Concentration of the majority of IT budget on improvements. The solution enhances productivity and “cloud enables” your business. Integration into an envrionment Hybrid : Same controls as in your private offerings

Helping You to Achieve Your Digital Transformation using the Atos Hybrid Cloud Platform Hybrid Cloud Infrastructure advantages Strategic Mgmt. Leverage Atos experience from real deployments Easily combine new services to accelerate your digital journey Rapidly transform business applications & integrate analytics Finance Minimize CAPEX & aggregate view of multiple clouds Control or integrate Shadow IT – enable access to cloud Improve cost control and transparency with service catalog Technical Hybrid cloud IaaS, for location, cost and performance flexibility Innovate with the latest selection of cloud technologies Cloud-native apps & container fabrics to support bi-modal IT Users Dynamic (DevOps) cloud services, gives quality & speed Select the best-fit solution in one rich, multi-cloud catalog Access innovation via integrated, user experience Procurement Leverage Atos cloud platform rich partner ecosystem One rich framework; simplify commercial processes Manage risk with streamlined control of providers

Addressing Digital Transformation Challenges The platform removes complexity and provides your staff intuitive tools to fulfil your digital needs Master technology & skills to reduce cost, create new business-value and improve productivity Seamlessly utilise both private and public clouds Seamlessly utilise both Private and Public clouds Intuitive portal provides seamless use of private & public cloud Enables automated, cloud-based application transformation and accelerates data-analytics insight Transform, build and manage business-apps & data analytics across multiple clouds Consolidate the management of disparate IT services Integrates mgmt. of traditional-IT with rich ecosystem of hybrid cloud services

Experience

Siemens uses the Hybrid Cloud Platform of Atos The Siemens Digital Private Cloud is probably the biggest private cloud in the world. Siemens has a Cloud First policy. The Hybrid Cloud Platform of Atos allows Siemens to manage and utilize both public (including Atos’ Managed Public Cloud - service packages) and private cloud infrastructures, as well as application orchestration and data analytics platforms.

Thanks For more information please contact: klaus-peter. nebert@atos Thanks For more information please contact: klaus-peter.nebert@atos.net

Shared Responsibility in the Public Cloud Security: Encryption, Integrity, Authentication, Identity and Access Management for Virtual Systems, Data, Applications and Network Connections, Customers responsibility Data Customer operations Responsible for Operation, Security, Compliancy of Applications Applications Logical Level MPC operations Responsible for Operation, Security, Compliancy of IaaS environment Operation and Configuration virtual Machines OS Virtual networks Virtual Firewalls Operation of Virtual Infrastructure Compute Storage Network Mgmt. env. Public Cloud Provider Responsible for Operation Security Availability of infrastructure resources Atos responsibility Operation of Physical Infrastructure Compute Storage Network Hyper-visor Physical Level Data Center Infrastructure Atos Responsibilities   Application infrastructure is normally built up using a number of complementing technologies in layers. In AWS this is no different, however the makeup is somewhat different. All traditional DC infrastructure (Hosting, Power, HVAC) plus supporting DC infrastructure such as Network, Storage, Server, and Hypervisor are in the DC Infra layer and managed by Amazon AWS. However, to provide a rich feature-set and allow a high degree of customisation by customers some new configuration aspects are introduced which require management by specially trained staff, whilst some traditionally advanced network services (such as load balancing) are also introduced into the same layer and team. Furthermore some additional complexity is introduced due to AWS limitations relating to inter-VPC connectivity and VPN. The new team is referred to as the AWS Console Team. The following diagram shows the split in responsibilities, and therefore the implementation of IAM rules will reflect this separation accordingly.

Helping You to Achieve Your Digital Transformation using the Managed Public Cloud Service Managed Public Cloud advantages Strategic Mgmt. Leverage Atos experience from real deployments Easily combine new services to accelerate your digital journey Rapidly transform business applications & integrate analytics Finance Minimize CAPEX & aggregate view of multiple clouds Control or integrate Shadow IT – enable access to cloud Improve cost control and transparency with service catalog Technical Hybrid cloud IaaS, for location, cost and performance flexibility Innovate with the latest selection of cloud technologies Cloud-native apps & container fabrics to support bi-modal IT Operational xx Secured Public Cloud environments to internal business customer Reduces complexity. only one interface for various public clouds Users Dynamic (DevOps) cloud services, gives quality & speed Select the best-fit solution in one rich, multi-cloud catalog Access innovation via integrated, user experience Procurement Leverage Atos cloud platform rich partner ecosystem One rich framework; simplify commercial processes Manage risk with streamlined control of providers