Government Clouds: Specific public sector requirements - ETSI docbox

Government Clouds: Specific public sector requirements

Per-Olav Gramstad Chief Adviser, Centre for Digitalisation Danish National IT and Telecom Agency

Agenda The NITA Computing as usual Up the S-Hill Market Pull Legislative Push Snakes Ladders The Tread Mills of Babel

The Danish National IT and Telecom Agency, NITA The Ministry of Science, Technology and Innovation Traditional legal basis within Telecom Recognised as a National Standards Organisation ”Up Stream” in eGov ICT

Cloud computing as usual


Technology as usual





Scale out not scale up

Not Business as usual


Scaling out you’re likely to cross-borders

Up the S-Hill

The Market Pull




Specify requirements Measure conformance Manage variations

On ”how-to” outsource, nothing new

Hands on experience – Two examples with NITA in the cloud


Digitalisér.dk •




Social sharing and knowledgeplatform

EasyTrade •

eInvoicing infrastructure and self service Read more:

EasyTrade in the cloud => more than 50% cost reduction

”Migration of Nemhandel to a commercial Cloud Computing Infrastructure”

digitaliser.dk/resource/567373

The Legislative Push




Disclose risk assessment information Risk assessment skills and tools Manage risk

On ”how-to” establish trust, nothing new

Municipality of Odense - Project where the children in primary school had Google Apps accounts - Involves personal data of the students with a certain level of privacy - Data protection issues - Risk assessment

Snakes


The Gaps




The Silos




The Wars

Ladders


Functionality




Quality




Cost




Time

The Tread Mills of Babel

That’s all! Off premise or time shifted questions: [email protected] Join us at: ”Cloud computing in Denmark” http://digitaliser.dk/resource/1570104 http://en.itst.dk/it-architecture-standards/cloudcomputing

Why is this interesting?






Cheaper Easier Faster More flexible Greener…

NITA in the cloud Digitalisér.dk, NemHandel and Borger.dk’s statistics module on Amazon’s Cloud. A monthly cost reduction of 50%

Cloud computing vs. traditional outsourcing Outsourcing

Cloud Computing

Location

You know where your Data can flow between data is located different data centres

Server dedication

Data is stored on individual dedicated servers

Multitenant – all client accounts share the same servers. All data is pooled together and stored randomly on a stack of servers

Municipality of Odense - Project where the children in primary school had Google Apps accounts - Involves personal data of the students with a certain level of privacy - Data protection issues - Risk analysis

Barriers


Contracts Data protection




Vendor dependency




Contracts






Standard contracts Availability SLA Support Jurisdiction

Data protection





Control of data National borders EU and third countries Security

Vendor dependency







Hosting, traditional outsourcing, cloud computing Access to data Change of cloud supplier Open standards

Next step


Guidance and support to public authorities








IT University The Capital Region of Denmark …

Cooperation with SMEs Data protection directive