MINUTES

Cloud Computing Information Community (CLIC) Wednesday 22 June 2011

10am to 12pm

1st Floor, Minter Ellison Building, 25 National Circuit, Forrest

1. Agenda Item 1 – Welcome and Apologies Present

Laurance Biglia, ACT Govt Justin Butcher, AFP

Chris Murdock, AFP Shane Lender (spelling?) AFP

Antony Stinziani, Geoscience Australia James Chudleigh, CGC

Thanh Nguyen, DHS Kay Paik, DEEWR

Tony Ward, DEEWR Steven McLeod, Defence

Luke Sledziona, Defence Jim Lilley, CSIRO

Carsten Friedrich, CSIRO Peter Jugovic, ABS

, FaHCSIA Katharine Stuart, NAA

Tristan Kathage, DBCDE David Campbell, AGD

Jess Nagaser (spelling?), AGD Clifton Chan, NZ Govt (teleconference)

Don Ashdown, Queensland Govt (teleconference)

Scott Donovan, Tasmanian Govt (teleconference) Brian Chilcott, NT Govt (teleconference)

Greg Kirk WA Govt (teleconference) Bill Butler NSW Govt (teleconference)

Apologies

• Ian French – Commonwealth Ombudsman

• Graeme Slattery – DoHA

• Brad Aitken – AFP

• Barbara Berce – NAA

• Dave Drury – DEEWR

• Andrew Choules – Customs

• Christine Pitt – DHS

• Paul Hoffmans – AAT

• Adam Durst – SA Govt

• Alan Dormer - CSIRO Guest Speakers

• Katharine Stuart, National Archive of Australia

• Antony Stinziani, Geoscience Australia

• Cartsen Friedrich, CSIRO Secretariat

s22

, AGIMO

Director, Architecture Team welcomed attendees and provided apologies for those who could not attend. also welcomed attendees who were participating via the teleconferencing facilities.

2. Review Action Items from 5 May Meeting The meeting reviewed the Action Items from the 5 May 2011 meeting.

The two action items arising from the previous meeting were closed. See Action Item table below for detail.

s22

s22

s22

3. Update of Cloud Strategy Workplan

Issue

AGIMO provided an overview of progress on the cloud strategy workplan deliverables and their expected timelines

Deliverable Consultation Progress

Stream 1

Enabling

1 a Establish a Cloud Information Community (CLIC) N/A COMPLETE

1 b Cloud Principles – Part of the Guide to Cloud Computing

These principles will be primarily based on the revised Australian Government Architecture Principles. A 'gap analysis' will be undertaken to determine if there are any extra cloud principles that need to be developed.

CLIC

CIOs

Public consultation

To be published in December 2011

1 b Cloud Governance Framework – Part of the Guide to Cloud Computing

The Cloud Governance Framework will be based upon existing frameworks that have been developed by AGIMO and other agencies. The Cloud Governance Framework may be based upon a lead agency model. There may be a need for SourceIT model contracts to be developed.

CLIC

CIOs

Other agencies, as necessary

To be published in December 2011

1 b Cloud Better Practice Guides and Checklists - Part of the Guide to Cloud Computing

It is envisaged that the following Better Practice Guides and Checklist will be created:

• Overview of Guides/Checklists • Privacy Guide/Checklist (OAIC/PM&C - under development) • Security Guide/Checklist (DSD – Interim guidance published) • Records Management (NAA – Interim Guidance due to be published this week) • Legal/ Contractual Arrangements Guide/Checklist (AGS - under development) • Business Management Guide/Checklist • Financial Guide/Checklist

CLIC

CIOs

Public consultation

Other agencies, as necessary

To be published in December 2011

1 b Cloud Provider Certification Investigation

This may involve the investigation of a Government Applications Store as a means to communicate to agencies a list of certified vendors.

CLIC/Other agencies, as necessary

Begin investigation in 2011

Stream 2

Public Clouds

2 a AGIMO websites to be transitioned to the cloud. AGIMO COMPLETE

2 b Whole-of-Government Cloud Panel Investigation.

This may require seconded resources from other agencies.

AGIMO Begin investigation in 2011

2 c Proof of Concepts/Pilots to be conducted by agencies. AGENCIES Agency determined

Stream 3

Private and

3 a Integration with Data Centre Strategy. AGIMO Begin investigation in mid-2011

Deliverable Consultation Progress

Community Clouds

3 b Investigation and adoption of private or community clouds. AGIMO Agency determined

3 c Investigation and establishment of a Government “Storefront” or Government Community Cloud AGIMO December 2012

3 d Expansion of the Cloud Information Community to undertake governance role for the Government “Storefront” or the Community Cloud/Government “Storefront” (tbc).

AGIMO December 2012

Decision

N/A

4. Presentation by National Archives of Australia

Issue

Katharine Stuart from the NAA provided a presentation on records management and the cloud.

Discussion

The NAA indicated that the records in the cloud should be treated in a similar manner to the way you manage records in an outsourced IT environment. We were reminded that a record is “any information that records evidence of business” and that a record provides proof of: what happened; when it happened and who made decisions. The NAA have six principles guiding the management of a record in the cloud. Records must be:

1. governed by the Archives Act, 1983; 2. authentic, accurate and trusted; 3. complete and unaltered; 4. secure from unauthorised access, alteration and deletion; 5. findable and readable; and 6. related to other relevant records

The NAA indicated the cross over with privacy and security concerns in principle 4 by using the following example: Records are to be secure from unauthorised access, alteration and deletion:

• Consider who has access to and use of your records; • Assess the provider’s viability; • Consider the risks of incomplete destruction of records.

A checklist to assist agencies assess the suitability of cloud solutions in terms of Commonwealth records management obligations has been drafted and will be published shortly on the NAA website. The presentation is available online at the CLIC GovDex site. www.govdex.gov.au

Decision

N/A

ACTION 1: AGIMO to notify members when the checklist is published on the NAA website.

5. Presentation by Geoscience Australia on High Performance Computing and Cloud Roadmap

Issue

Antony Stinziani provided an overview of the challenges faced by GA in transforming their research business with cloud computing.

Discussion

The presentation is available online at the CLIC GovDex site. www.govdex.gov.au

Decision

Nil

6. Presentation by CSIRO on Services Science and Cloud Computing

Issue

This presentation postponed to next month’s meeting due to the Ash Cloud interrupting Alan Dormer’s air service to Canberra.

Discussion

Nil

Decision

Nil

7. Presentation by CSIRO on Cloud Technologies and Interests at CSIRO

Issue

Carsten Friedrich from the CSIRO provided a presentation on cloud technologies and interests at CSIRO.

Discussion

The presentation is available online at the CLIC GovDex site. www.govdex.gov.au

Decision

Nil

8. Security and Privacy Issues

Issue

commenced a discussion on recent events related to hacking and service continuity/availability and called on Steven Mcleod from DSD to provide an insight.

Discussion

Steven mentioned the Dropbox security breach and the hacking activities of LulzSec on the Australian based company Distribute.IT business resulting in an unrecoverable loss of data.

DBCDE clarified it was the web side of Distribute.IT’s business and not the Domain Name Registration side of the business that was affected.

Decision

Nil

9. Environment/ Industry Scan

Issue

Standing agenda item on the cloud environment and industry developments

Discussion

provided a brief overview of his attendance at last weeks AIIA Cloud Task Force meeting.

The AIIA has established tiger teams to work through the following cloud issues:

7. National benefits 8. Contracts and procurement issues 9. Data sovereignty

An overview of the environment scan is as follows:

s22

s22

There appears to have been a “cooling off” on the US and UK Governments cloud strategies. The UK’s review of their cloud strategy may also be driven from the effects of the GFC and reflect the immaturity of the market in general.

Decision

N/A

10. General Business

Issue

Opportunity for members to raise issues

Discussion

1. The Cross Jurisdictional Chief Information Officers Committee (CJCIOC) has tasked the Cloud Information Community CLIC with identifying which agencies were engaged with Google Maps. The purpose being to determine the demand for a possible WofG agreement for the use of the product.

ACTION 2: CLIC Members to send a response to aga@finance.gov.au with an indication of what Google products their agencies are using, specifically, if they are using Google Maps by COB 6th July 2011.

The next meeting was tentatively scheduled for Thursday 28 July 2011.

Members were asked to consider hosting upcoming meetings at their premises and to suggest the format of future meetings.

ACTION 3: AGIMO to confirm date and send out invitation for next meeting.

ACTION 4: Members to consider format of future meetings and volunteer to host a meeting.

Decision

N/A

ACTION ITEMS SUMMARY – CLIC MEETING, 22 JUNE 2011

Ref Meeting Item Action Due Date Owner Status

21/2011 22 June 4 AGIMO to notify members when the checklist is published on the NAA website. 10 July 2011 AGIMO In Progress

22/2011 22 June 10 CLIC Members to send a response to aga@finance.gov.au with an indication of what Google products their agencies are using, specifically, if they are using Google Maps by COB 6th July 2011.

6 July 2011 Members In Progress

23/2011 22 June 10 AGIMO to confirm date and send out invitation for next meeting. 10 July 2011 AGIMO In Progress

24/2011 22 June 10 Members to consider format of future meetings and volunteer to host a meeting. 10 July 2011 Members In Progress