# ERMOCTAVE: A Risk Management Framework for IT Systems Which Adopt Cloud Computing
## 4 Case Study with Microsoft Azure Cloud
### Azure Hybrid Application  
In the scenario, the company adopts an existing infrastructure into Azure hybrid cloud by migrating resources and applications to the cloud. Applications running across the cloud and on-premises use the Azure SQL platform in the same or different cloud data centers and resources on premises. Figure 2 shows the scenario architecture implemented for the hybrid application. In this figure, the orders application operates in much the same way as when it ran entirely on premises. Dashed undirected edges indicate control flows including small amount of data between entities. Dashed directed edges mean one way data flows especially for data replication. More details about the components and implementation of each part of the application are explained below. * Orders application: it is a web application that allows visitors to make orders for products. It stores the data in Azure SQL which would distribute the data over different cloud data centers. * Orders table: when a customer issues an order, the orders application receives the order and stores it into orders table. The orders table is updated whenever a customer makes an order, orders are shipped by the transport partners, and the product is delivered to the customers. * Audit log: it is a database table for management and monitoring of the applications. * Customers table: it contains client information. Figure 1: Applications running on premises. * Products table: it contains product information. Products table and customers table are updated on premises in conjunction with the related on-premises processes. Since duplications exist in the tables located in each data center, a data synchronization mechanism should work. * Reporting service: two types of reporting services are available using the Azure SQL service:
* SQL server reporting service: it creates comprehensive reports of business intelligence from stored tables in the database. * Azure SQL reporting service: a service provided by Azure and generates a set of customized business intelligence reports. * Azure SQL: Azure SQL is a database service that fully supports SQL-based operations. It is implemented by SQL server instances in cloud data center. * Compliance application: it examines orders on compliance with export restrictions and government regulations for technical products. * Monitoring and management application: it monitors daily operations, holds logging, and is used for audit on data accesses. * Security manager: the security manager is responsible for monitoring the entire security operation by implementing security policies, regulations, rules, and ensuring that Azure cloud is securely deployed and used by employers and visitors. The security manager also delegates tasks and duties to staff. One of the security manager's main duties is to control customer accesses to the orders application. * Social identity providers: Social identity refers to an identity managed by an established online identity provider. Social identity providers generate identifiers for users who connect servers that allow the identifiers. This can be achieved using an authentication system verifying a security token. As an example, Azure cloud enables users to log in with their Facebook credentials. In this case, Facebook is considered as a social identity provider. Figure 2: The example application running on cloud and on-premises. After applications migrating to Microsoft Azure cloud infrastructure, the functionalities between modules are as follows. * Every customer's request passes through Azure traffic manager which redirects it to the orders application running in the closest cloud data center. * A social identity provider is used to authenticate customers. * When a customer makes an order, the orders application stores the order details in the orders table, sends a message to an appropriate transport partner, and then sends any audit information to the monitoring and management application on premises.