Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Sibe nomcimbi omkhulu womhla zizi-4 kuJulayi Iworkshop yokuphatha ubungozi. Namuhla sishicilela umbhalo wenkulumo ka-Andrey Novikov waseQualys. Uzokutshela ukuthi yiziphi izinyathelo okudingeka uhambe kuzo ukuze wakhe ukugeleza komsebenzi wokuphatha ubungozi. Spoiler: sizofika kuphela endaweni emaphakathi ngaphambi kokuskena.


Isinyathelo #1: Thola izinga lokuvuthwa lezinqubo zakho zokuphatha ubungozi

Ekuqaleni, udinga ukuqonda ukuthi inhlangano yakho ikusiphi isigaba mayelana nokuvuthwa kwezinqubo zayo zokuphatha ubungozi. Kuphela ngemva kwalokhu uzokwazi ukuqonda ukuthi uzohamba kuphi nokuthi yiziphi izinyathelo okufanele zithathwe. Ngaphambi kokuthi ziqale ukuskena neminye imisebenzi, izinhlangano zidinga ukwenza umsebenzi othile wangaphakathi ukuze ziqonde ukuthi izinqubo zakho zamanje zakhiwe kanjani ngokombono we-IT kanye nokuphepha kolwazi.

Zama ukuphendula imibuzo eyisisekelo:

  • Ingabe unazo izinqubo zokusungula kanye nokuhlukaniswa kwempahla; 
  • Ingqalasizinda ye-IT iskenwa njalo kangakanani futhi ingqalasizinda yonke ihlanganiswa, uyasibona sonke isithombe;
  • Ingabe izinsiza zakho ze-IT ziyagadwa?
  • Ingabe noma imaphi ama-KPI asetshenziswa ezinqubweni zakho futhi uqonda kanjani ukuthi ayahlangatshezwana nawo;
  • Ingabe zonke lezi zinqubo zibhaliwe?

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #2: Qinisekisa Ukutholakala Okugcwele Kwengqalasizinda

Awukwazi ukuvikela into ongayazi. Uma ungenaso isithombe esiphelele sokuthi ingqalasizinda yakho ye-IT yenziwe ngani, ngeke ukwazi ukuyivikela. Ingqalasizinda yesimanje inkimbinkimbi futhi ilokhu ishintsha ngokwenani nangekhwalithi.
Manje ingqalasizinda ye-IT ayisekelwe kuphela enqwabeni yobuchwepheshe bakudala (iziteshi zokusebenzela, amaseva, imishini ebonakalayo), kodwa futhi nasemitsha - iziqukathi, ama-microservices. Isevisi yezokuphepha yolwazi ibalekela lezi zakamuva ngazo zonke izindlela, ngoba kunzima kakhulu ukuthi isebenze nazo zisebenzisa amasethi amathuluzi akhona, ahlanganisa ikakhulukazi izikena. Inkinga ukuthi noma yisiphi isithwebuli asikwazi ukumboza yonke ingqalasizinda. Ukuze isithwebuli sifinyelele kunoma iyiphi indawo engqalasizinda, izici ezimbalwa kufanele ziqondane. Impahla kufanele ibe phakathi kwe-perimeter yenhlangano ngesikhathi sokuskena. Isithwebuli kufanele sibe nokufinyelela kwenethiwekhi ezimpahleni nama-akhawunti azo ukuze siqoqe ulwazi oluphelele.

Ngokwezibalo zethu, uma kuziwa ezinhlanganweni eziphakathi nendawo noma ezinkulu, cishe u-15–20% wengqalasizinda awuthathwa yisithwebuli ngesizathu esisodwa noma esinye: impahla iye yadlulela ngale kwe-perimeter noma ayikaze ivele ehhovisi nhlobo. Isibonelo, ikhompuyutha ephathekayo yesisebenzi esisebenza ukude kodwa esisakwazi ukufinyelela inethiwekhi yebhizinisi, noma impahla itholakala kumasevisi amafu angaphandle njenge-Amazon. Futhi isithwebuli, cishe, ngeke sazi lutho ngalezi zimpahla, njengoba zingaphandle kobubanzi baso bokubonakala.

Ukumboza yonke ingqalasizinda, awudingi ukusebenzisa izikena kuphela, kodwa isethi yonke yezinzwa, okuhlanganisa nobuchwepheshe bokulalela ithrafikhi ukuze uthole amadivaysi amasha kungqalasizinda yakho, indlela yokuqoqa idatha ye-ejenti ukuze uthole ulwazi - ikuvumela ukuthi uthole idatha ku-inthanethi, ngaphandle isidingo sokuskena, ngaphandle kokugqamisa izifakazelo.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #3: Hlela Izimpahla

Akuwona wonke amafa adalwe alingana. Kungumsebenzi wakho ukunquma ukuthi yiziphi izimpahla ezibalulekile nezingabalulekile. Alikho ithuluzi, njengesithwebuli, elizokwenzela lokhu. Ngokufanelekile, ukuphepha kolwazi, i-IT kanye nebhizinisi kuyasebenzisana ukuze kuhlaziywe ingqalasizinda ukuze kutholakale izinhlelo ezibalulekile zebhizinisi. Kubo, banquma amamethrikhi amukelekayo okutholakala, ubuqotho, ubumfihlo, i-RTO/RPO, njll.

Lokhu kuzokusiza ukuthi ubeke phambili inqubo yakho yokuphatha ubungozi. Uma ochwepheshe bakho bethola idatha emayelana nokuba sengozini, ngeke kube ishidi elinezinkulungwane zobungozi kuyo yonke ingqalasizinda, kodwa ulwazi oluyimbudumbudu olucabangela ukubaluleka kwamasistimu.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #4: Yenza Ukuhlola Ingqalasizinda

Futhi kuphela esinyathelweni sesine lapho sifika ekuhloleni ingqalasizinda ngokombono wokukhubazeka. Kulesi sigaba, sincoma ukuthi unganaki kuphela ubungozi besoftware, kodwa futhi namaphutha okumisa, okungaba futhi ukuba sengozini. Lapha sincoma indlela ye-ejenti yokuqoqa ulwazi. Izikena zingakwazi futhi kufanele zisetshenziselwe ukuhlola ukuphepha kwepherimitha. Uma usebenzisa izinsiza zabahlinzeki bamafu, kuzomele futhi uqoqe ulwazi lwamafa nokulungiselelwa kusukela lapho. Naka ngokukhethekile ukuhlaziya ubungozi kungqalasizinda usebenzisa iziqukathi ze-Docker.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #5: Setha ukubika

Lokhu kungenye yezinto ezibalulekile ngaphakathi kwenqubo yokuphatha ubungozi.
Iphuzu lokuqala: akekho ozosebenza ngemibiko enamakhasi amaningi enohlu olungahleliwe lobungozi kanye nezincazelo zokuthi bususwa kanjani. Okokuqala, udinga ukuxhumana nozakwenu futhi uthole ukuthi yini okufanele ibe embikweni nokuthi kulula kangakanani ukuthi bathole idatha. Isibonelo, omunye umlawuli akayidingi incazelo enemininingwane yokuba sengozini futhi udinga kuphela ulwazi mayelana nesichibi nesixhumanisi kuso. Omunye uchwepheshe ukhathalela kuphela ubungozi obutholakala kungqalasizinda yenethiwekhi.

Iphuzu lesibili: ngokubika angisho imibiko yamaphepha kuphela. Lena ifomethi ephelelwe yisikhathi yokuthola ulwazi kanye nendaba engashintshi. Umuntu uthola umbiko futhi akanakukwazi nganoma iyiphi indlela ukuthi idatha izokwethulwa kanjani kulo mbiko. Ukuze uthole umbiko ngefomu olifunayo, uchwepheshe we-IT kufanele athinte uchwepheshe wezokuphepha kolwazi futhi amcele ukuthi akhe kabusha umbiko. Njengoba isikhathi siqhubeka, kuvela ubungozi obusha. Esikhundleni sokuphusha imibiko emnyangweni uye komunye, ochwepheshe kuyo yomibili le mikhakha kufanele bakwazi ukuqapha idatha ku-inthanethi futhi babone isithombe esifanayo. Ngakho-ke, endaweni yethu sisebenzisa imibiko eguquguqukayo ngendlela yamadeshibhodi enziwe ngendlela oyifisayo.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #6: Beka kuqala

Lapha ungenza okulandelayo:

1. Ukudala inqolobane enezithombe zegolide zamasistimu. Sebenza ngezithombe ezisagolide, zihlole ukuthi azikho yini ubungozi futhi uzilungiselele ngokuqhubekayo. Lokhu kungenziwa ngosizo lwama-ejenti azobika ngokuzenzakalelayo ukuvela kwempahla entsha futhi anikeze ulwazi mayelana nokuba sengozini kwayo.

2. Gxila kulezo zimpahla ezibalulekile ebhizinisini. Ayikho neyodwa inhlangano emhlabeni engaqeda ubuthakathaka ngesikhathi esisodwa. Inqubo yokuqeda ubuthakathaka yinde futhi iyakhathaza.

3. Ukunciphisa indawo yokuhlasela. Hlanza ingqalasizinda yakho kuma-software nezinsizakalo ezingadingekile, vala amachweba angadingekile. Muva nje sibe nenkinga nenkampani eyodwa lapho ubungozi obungaba izinkulungwane eziyi-40 obuhlobene nenguqulo yakudala yesiphequluli se-Mozilla kutholwe kumadivayisi ayizinkulungwane ezingama-100. Njengoba kwavela kamuva, i-Mozilla yethulwa esithombeni segolide eminyakeni eminingi edlule, akekho oyisebenzisayo, kodwa ingumthombo wenani elikhulu lobuthakathaka. Ngenkathi isiphequluli sikhishwa kumakhompyutha (kwakumanye amaseva), lezi zingozi ezingamashumi ezinkulungwane zanyamalala.

4. Izinga lokuba sengozini ngokusekelwe kubuhlakani bosongo. Ungacabangi nje kuphela ukubaluleka kokuba sengozini, kodwa futhi nokuba khona kokuxhashazwa komphakathi, uhlelo olungayilungele ikhompuyutha, isiqephu, noma ukufinyelela kwangaphandle ohlelweni olusengozini. Hlola umthelela walokhu kuba sengozini ezinhlelweni zebhizinisi ezibalulekile: kungaholela ekulahlekeni kwedatha, ukunqatshelwa kwesevisi, njll.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #7: Vumelana ngama-KPI

Ungaskeneli ngenjongo yokuskena. Uma kungenzeki lutho ebuthakathakeni obutholakele, lokhu kuskena kuphenduka umsebenzi ongenamsebenzi. Ukuze uvimbele ukusebenza ngobungozi ekubeni kube okusemthethweni, cabanga ukuthi uzoyihlola kanjani imiphumela yakho. Ukuphepha kolwazi kanye ne-IT kumele kuvunyelwane ngokuthi umsebenzi wokuqeda ubungozi uzohlelwa kanjani, ukuthi kuzokwenziwa kangaki ukuskena, amapeshi azofakwa, njll.
Kusilayidi ubona izibonelo zama-KPI angenzeka. Kukhona nohlu olunwetshiwe esiluncoma kumakhasimende ethu. Uma unentshisekelo, ngicela ungithinte, ngizokwabelana nawe ngalolu lwazi.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #8: Yenza ngokuzenzakalelayo

Buyela ekuskeneni futhi. Kwa-Qualys, sikholelwa ukuthi ukuskena kuyinto engabalulekile kakhulu engenzeka ohlelweni lokuphatha ubungozi namuhla, nokuthi okokuqala kudinga ukwenziwa ngokuzenzakalelayo ngangokunokwenzeka ukuze kwenziwe ngaphandle kokuhlanganyela kochwepheshe bezokuphepha kolwazi. Namuhla kunamathuluzi amaningi akuvumela ukuthi wenze lokhu. Kwanele ukuthi bane-API evulekile kanye nenombolo edingekayo yezixhumi.

Isibonelo engithanda ukusinikeza i-DevOps. Uma usebenzisa iskena sobungozi lapho, ungavele ukhohlwe nge-DevOps. Ngobuchwepheshe obudala, okuyisithwebuli sakudala, ngeke nje uvunyelwe kulezi zinqubo. Onjiniyela ngeke balinde ukuthi uskene futhi ubanikeze amakhasi amaningi, umbiko ongalungile. Onjiniyela balindele ukuthi ulwazi olumayelana nokuba sengozini luzofaka amasistimu abo okuhlanganisa amakhodi ngendlela yolwazi lwesiphazamisi. Ukuphepha kufanele kwakhelwe ngaphandle komthungo kulezi zinqubo, futhi kufanele kube isici esibizwa ngokuzenzakalelayo isistimu esetshenziswa onjiniyela bakho.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Isinyathelo #9: Gxila Kokubalulekile

Gxila kulokho okuletha inani langempela enkampanini yakho. Izikena zingazenzakalela, imibiko ingathunyelwa ngokuzenzakalela.
Gxila ekuthuthukiseni izinqubo ukuze uzenze zivumelane nezimo futhi zilungele wonke umuntu ohilelekile. Gxila ekuqinisekiseni ukuthi ukuphepha kwakhelwa kuzo zonke izinkontileka nozakwenu, okuthi, ngokwesibonelo, bathuthukisele wena izinhlelo zokusebenza zewebhu.

Uma udinga ulwazi oluningiliziwe mayelana nendlela yokwakha inqubo yokuphatha ubungozi enkampanini yakho, sicela uxhumane nami kanye nozakwethu. Ngingajabula ukusiza.

Hhayi nje ukuskena, noma indlela yokwakha inqubo yokuphatha ubungozi ngezinyathelo eziyi-9

Source: www.habr.com

Engeza amazwana