european cloud computing strategy - cpeig.gal · • cloud-cert - list of certification schemes –...

17
European Cloud Computing Strategy Jorge GASOS DG Connect, European Commission [email protected] Key actions and state of play

Upload: others

Post on 30-May-2020

14 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

European Cloud Computing Strategy

Jorge GASOS DG Connect, European Commission [email protected]

Key actions and state of play

Page 2: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Cloud services: market forecast §  Supply side: new business

opportunities for telecom operators, cloud services providers and system integrators

§  Demand side: increased productivity, enhanced competitiveness, faster deployment of advanced IT services, especially for start-ups and SMEs

§  Many potential users still associate cloud computing with increased risks, such as: privacy, security, continuity of services, legal jurisdiction, etc.

Impact on providers and users

Page 3: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

3

Policy context: Cloud Computing Strategy •  27 September 2012: COM on Unleashing the Potential of

Cloud Computing in Europe. Accompanying Staff Working Document

•  The strategy is designed to stimulate the uptake of cloud computing across the economy

•  Three key actions: • Mapping cloud relevant standards • Fair and safe contracts and SLAs • European Cloud Partnership

Page 4: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Progress

4

•  Key action 1: •  Standards mapping by ETSI

– Cloud Standards Coordination Conference Brussels - December 2013 •  Cloud-CERT - list of certification schemes

– ENISA list (February 2014) and Meta-framework Mid-2014 •  Key action 2:

•  Cloud Service Level Agreements – Guidelines document Mid 2014

•  Code of conduct (data protection) – Draft to Art 29 WP February 2014 – Aim endorsement during this Commission

•  Cloud Contract Group – First results Mid 2014

•  Key action 3 •  Steering Board

– Trusted Cloud Europe Visions Document – March 2014 •  Cloud 4 Europe project

– Official launch 14 November 2013 – Pre-notice April, call for tender early summer 2014

Page 5: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

ETSI – CSC Structure and Timeline

ETSI  @  CSC  Workshop  –  10/12/12013  

•  Launched in December 2012 •  Workshop in Cannes, co-organized by EC, 200+ participants •  Definition of work structure: 3 TGs, a coordination group (‘reference’)

•  TG1 for definition of Roles and TG2 for collection of Use Cases •  TG3 in charge of Use Case Analysis and Production of the Report

ETSI Support: Laurent Vreck

Key Action 1-1

Page 6: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

15/07/14 6

Page 7: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

SLAs: Creating A Common Vocabulary of Understanding

Purchaser’s Dilemma SIG SLA Support

“Cloud Contracts are not comparable and use different definitions”

Template SLAs and Terms and Conditions

“I don’t know which Cloud Delivery Options are right for my specific need”

Cloud Decision Flowchart

“I don’t know if I have considered the most important aspects for this contract”

Cloud Contract Checklist

Key action 2-1

Page 8: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Fair Contract Terms and Conditions

•  Service Level Agreements (Cloud Select Industry Group)

•  data preservation after termination of the contract,

•  data disclosure and integrity,

•  data location and transfer,

•  ownership of the data,

•  direct and indirect liability change of service by cloud providers and subcontracting

Page 9: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Code of Conduct on DP: Background

•  Directive 95/46/EC art 27 encourages adoption of codes of conduct and their endorsement by art 29 Working Party

•  EC Cloud Computing Strategy of 29-09-2012 “Work with industry to agree a code of conduct for cloud computing providers to support a uniform application of data protection rules which may be submitted to the Article 29 Working Party for endorsement in order to ensure legal certainty and coherence between the code of conduct and EU law.”

Key action 2-2

Page 10: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

PCP - PPI

•  PCP to steer the development of solutions to public sector needs /validating alternative solution approaches from various vendors

•  PPI to act as launching customer / early adopter / first buyer of innovative commercial end-solutions newly arriving on the market

Pre-Commercial Procurement Public Procurement of Innovative solutions

Supplier B

Supplier C

Supplier D

Phase 1 Solution design

Phase 2 Prototype

development

Phase 3 Original development

of limited volume of first test products /

services Supplier A

Supplier B

Supplier C

Supplier D

Supplier B

Phase 0 Curiosity

Driven Research

R&D / Pre-commercial Procurement (PCP)

Phase 4 Deployment of commercial

end-products Diffusion of newly developed

products / services

Supplier D

Public Procurement of Innovative Solutions (PPI)

Supplier(s) A,B,C,D and/or X

multiple sourcing

Page 11: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

11

ICT 8 - 2015

Pre-commercial procurement for public sector cloud computing services (PCP) •  common requirements and terms of reference for

future procurement of cloud computing services

9 M€; large projects; PCP

Public procurement of innovative cloud computing solutions (PPI) •  organizing joint procurement

of innovative cloud services by public authorities

13 M€; large projects; PPI

Page 12: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

12

ICT 8 - 2015

Building on work undertaken by the project C4E: www.cloudforeurope.eu

Page 13: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

European Cloud Partnership Steering Board: Trusted Cloud Europe Report Consultation: March - May

Page 14: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Roadmap

Page 15: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

Priorities

•  Agreement on harmonised EU data protection

•  Safer more consistent contracts and means to resolve disputes

•  Moving from formal to functional requirements for data location

•  Encourage Cloud-Active procurement policies

Page 16: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

§  Continuing core research in cloud computing

§  Cloud as an enabler of new applications (Big Data, IoT)

§  What is beyond Cloud Computing?

§  Software a key driver for productivity and growth

§  Open source development and innovation

Research and Innovation

§  Cloud supporting industrial / public sector innovation

§  Cloud as an enabler for SMEs / startups

Page 17: European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes – ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2: • Cloud

17

Further Information

Horizon 2020 www.ec.europa.eu/research/horizon2020

Digital Agenda – Cloud Computing https://ec.europa.eu/digital-agenda/en/telecoms-and-internet/cloud-computing

Join us in this exciting journey