To provide a robust Configuration and Compliance Management process, automate and remove the need for manual intervention wherever possible. People, process, and tools must be in place to support the overall process. Evolving the Configuration and Compliance Management process takes time and effort—work on maturing processes in stages rather than taking on the challenge as a whole in a single step.

Initially, the challenge is to define, document, maintain, and adhere to the following.

Over time, vCloud organizations mature and become more vCloud Service-focused. As a result, automated collections, reports, and remediation are necessary to help vCloud providers meet the required levels of standardization and compliance. These efforts are initially manual, but as time goes by and with maturing processes in place, tool automation can be introduced and expanded so that future Standards and Compliance Policies can be implemented with minimal manual interaction. Automation possibilities must be evaluated to identify other configuration and compliance scenarios that can be made more efficient.

A part of the overall Configuration and Compliance Management effort should also be the collection and reporting of specific Cloud KPIs to key stakeholders showing the overall state of the environment. Examples could be % of non-compliant CIs or services, time to remediate of non-compliant systems or % of services made compliant utilizing automated remediation.