government clouds: specific public sector requirements · 2011-10-03 · cloud computing vs....

22
Government Clouds: Specific public sector requirements Per-Olav Gramstad Chief Adviser, Centre for Digitalisation Danish National IT and Telecom Agency

Upload: others

Post on 28-May-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Government Clouds: Specific public sector requirements

Per-Olav Gramstad

Chief Adviser, Centre for Digitalisation

Danish National IT and Telecom Agency

Page 2: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Agenda

The NITA

Computing as usual

Up the S-HillUp the S-Hill

Market Pull

Legislative Push

Snakes

Ladders

The Tread Mills of Babel

Page 3: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

The Danish National IT and Telecom Agency, NITA

The Ministry of Science, Technology and Innovation

Traditional legal basis within Telecom

Recognised as a National Standards Organisation

”Up Stream” in eGov ICT

Page 4: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Cloud computing as usual

� Technology as usual� Scale out not scale upScale out not scale up

� Not Business as usual� Scaling out you’re likely to cross-borders

Page 5: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Up the S-Hill

Page 6: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

The Market Pull

� Specify requirements

� Measure conformanceMeasure conformance

� Manage variations

On ”how-to” outsource, nothing new

Page 7: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Hands on experience – Two examples with NITA in the cloud

� Digitalisér.dk• Social sharing and

knowledgeplatformknowledgeplatform� EasyTrade

• eInvoicing infrastructure and self service

EasyTrade in the cloud => more than 50% cost reduction

Read more:

”Migration of Nemhandel to a commercial Cloud Computing Infrastructure”

digitaliser.dk/resource/567373

Page 8: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

The Legislative Push

� Disclose risk assessment information

� Risk assessment skills and toolsRisk assessment skills and tools

� Manage risk

On ”how-to” establish trust, nothing new

Page 9: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Municipality of Odense

- Project where the children in primary school had Google Apps accountshad Google Apps accounts

- Involves personal data of the students with a certain level of privacy

- Data protection issues

- Risk assessment

Page 10: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Snakes

� The Gaps

� The Silos

� The Wars

Page 11: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Ladders

� Functionality

� Quality

� Cost

� Time

Page 12: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

The Tread Mills of Babel

Page 13: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

That’s all!

Off premise or time shifted questions: [email protected]

Join us at: ”Cloud computing in Denmark”

http://digitaliser.dk/resource/1570104

http://en.itst.dk/it-architecture-standards/cloud-computing

Page 14: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Why is this interesting?

� Cheaper

� Easier� Easier

� Faster

� More flexible

� Greener…

Page 15: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

NITA in the cloud

Digitalisér.dk, NemHandel and Borger.dk’s statistics module Borger.dk’s statistics module on Amazon’s Cloud.

A monthly cost reduction of 50%

Page 16: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Cloud computing vs. traditional outsourcing

Outsourcing Cloud Computing

Location You know where your data is located

Data can flow between different data centres

Server dedication

Data is stored on individual dedicated servers

Multitenant – all client accounts share the same servers.

All data is pooled together and stored randomly on a stack of servers

Page 17: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Municipality of Odense

- Project where the children in primary school had Google Apps accountshad Google Apps accounts

- Involves personal data of the students with a certain level of privacy

- Data protection issues

- Risk analysis

Page 18: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Barriers

� Contracts

� Data protection

� Vendor dependency

Page 19: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Contracts

� Standard contracts

� Availability� Availability

� SLA

� Support

� Jurisdiction

Page 20: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Data protection

� Control of data

� National borders� National borders

� EU and third countries

� Security

Page 21: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Vendor dependency

� Hosting, traditional outsourcing, cloud computingcomputing

� Access to data

� Change of cloud supplier

� Open standards

Page 22: Government Clouds: Specific public sector requirements · 2011-10-03 · Cloud computing vs. traditional outsourcing Outsourcing Cloud Computing Location You know where your data

Next step

� Guidance and support to public authorities� IT UniversityIT University

� The Capital Region of Denmark

� …

� Cooperation with SMEs

� Data protection directive