Some Public Sector Cloud Views

Transcription

1 Some Public Sector Cloud Views Digital Enterprise Europe, London, June 11 th, 2014 Zentrum für sichere Informationstechnologie - Austria

2 Expectations and Take Up some are high and some are low. Digital Enterprise Europe, London, 2014/06/11 Slide 2

3 Gov Cloud Deployment varies From: ENISA Good Practice Guide for securely deploying Governmental Clouds, 2013 Digital Enterprise Europe, London, 2014/06/11 Slide 3

4 Presentation Outline EC Communication ECP and Trusted Cloud Europe Cloud for Europe The Role of Identity Digital Enterprise Europe, London, 2014/06/11 Slide 4

5 EC Communication Unleashing the Potential of Cloud Computing in Europe 1) Analysis based on several studies 2) Defines 3 Key Actions 1) COM(2012) 529 final 2) e.g. IDC-Study SMART 2011/0045 Digital Enterprise Europe, London, 2014/06/11 Slide 5

6 Expectations: Economic Impact From: IDC-Study SMART 2011/0045 Digital Enterprise Europe, London, 2014/06/11 Slide 6

7 Expectations: Estimates EC estimates that actions could by 2020 mean 1) 45 billion direct spend on Cloud Computing 957 billion cumulative impact on GDP 3,8 million jobs October 2013 Council Conclusions 2) 1) COM(2012) 529 final 2) European Council, EUCO 169/13 Digital Enterprise Europe, London, 2014/06/11 Slide 7

8 Barriers Legal, Security, Data Protect., Portability From: IDC-Study SMART 2011/0045 Digital Enterprise Europe, London, 2014/06/11 Slide 8

9 EC Communication s Key Areas Fragmentation of the digital single market Differing national legal frameworks Uncertainties over applicable law and data location Trust and security; data protection, consumer protection, criminal law, etc. Problems with contracts Worries over data access and portability Liability for service failures such loss of data Ownership of data Jungle of standards Digital Enterprise Europe, London, 2014/06/11 Slide 10

10 EC Communication s Three Key Actions 1. Cutting through the Jungle of Standards Cloud Standards Coordination, map (ETSI) Security Certification (ENISA) 2. Safe & Fair Contract Terms and Conditions Model contract terms, SLAs, code of conduct 3. European Cloud Partnership a. Steering Board b. Pre-Commercial Procurement Digital Enterprise Europe, London, 2014/06/11 Slide 11

11 Presentation Outline EC Communication ECP and Trusted Cloud Europe Cloud for Europe The Role of Identity Digital Enterprise Europe, London, 2014/06/11 Slide 12

12 ECP-SB: The Result Vision document identifies barriers and proposes two groups of action: 1. flexible common framework of best practices 2. systematic consensus building targeting all stakeholders Digital Enterprise Europe, London, 2014/06/11 Slide 14

13 Some quotes Europe is, however, lagging behind other regions in the take-up of cloud computing. Recent revelations have the potential to harm trust in cloud-based solutions. Moreover, due to a lack of regulatory consistency and due to policies which are technologically conservative, cloud computing in Europe remains fragmented.. Digital Enterprise Europe, London, 2014/06/11 Slide 15

14 Trusted Cloud Europe proposed actions Digital Enterprise Europe, London, 2014/06/11 Slide 16

15 Presentation Outline EC Communication ECP and Trusted Cloud Europe Cloud for Europe The Role of Identity Digital Enterprise Europe, London, 2014/06/11 Slide 17

16 Elevator Pitch Public sector Cloud use as a collaboration between public authorities and industry through pre-commercial procurement Digital Enterprise Europe, London, 2014/06/11 Slide 18

17 Project Key Facts CSA-CP for PCP under FP7 24 partners from 12 states AT, BE, DE, EE, ES, IT, NL, PT, RO SI, SK, TR Two main phases: 1. Preparation of the PCP tender (by consortium) 2. Cloud services through joint PCP (from industry) Currently procures from IT, NL, PT, RO, SK Budget: ~ 13,5 M (~ 9,5 M for PCP) Start date: 1 st June 2013 Digital Enterprise Europe, London, 2014/06/11 Slide 19

18 Project Phases Tender preparation (14 months) We are here PCP operation (18 months) 2 nd market consultation: June 16 th, London Tender publication: July/Aug. TED Sharing (6 m.) Digital Enterprise Europe, London, 2014/06/11 Slide 21

19 Barriers Identified Safe, fair, clear, easy, standard contract terms Clear and comparable service level agreements Data access after termination of the contract Data disclosure and integrity Data location and transfer Ownership of the data Data privacy, Security Direct and indirect liability change of service by cloud providers and subcontracting Digital Enterprise Europe, London, 2014/06/11 Slide 22

20 Barriers Identified Safe, fair, clear, easy, standard contract terms Clear and comparable service level agreements Data access after termination of the contract Data disclosure and integrity Data location and transfer Ownership of the data Data privacy, Security Direct and indirect liability change of service by cloud providers and subcontracting Digital Enterprise Europe, London, 2014/06/11 Slide 23

21 Service List Overview Piloting Services 1. Basic Communication 2. Document Mgmt. 3. Customs Supply Chain 4. Customs Data Pipeline 5. Legislation-Aware Storage 6. European Citizen Initiative 7. Archive as a Service 8. Secure Pers. Data Vault 9. Documents and Files Interoperability Node 10. edocument Service 11. Restful collaboration 12. Legislation execution 13. Personal digital asset service Horizontal Services 1. eid as a Service 2. Encryption as a Service 3. Independent Third Party Assurance 4. Public Administration Cloud Services Broker 5. Cloud Certification as a Service 6. Resilient Open- Source Cloud Services Stack 7. Changing the Cloud Provider 24

22 Service List Overview Piloting Services 1. Basic Communication 2. Document Mgmt. 3. Customs Supply Chain 4. Customs Data Pipeline 5. Legislation-Aware Storage 6. European Citizen Initiative 7. Archive as a Service 8. Secure Pers. Data Vault 9. Documents and Files Interoperability Node 10. edocument Service 11. Restful collaboration 12. Legislation execution 13. Personal digital asset service Horizontal Services 1. eid as a Service 2. Encryption as a Service 3. Independent Third Party Assurance 4. Public Administration Cloud Services Broker 5. Cloud Certification as a Service 6. Resilient Open- Source Cloud Services Stack 7. Changing the Cloud Provider 25

23 Presentation Outline EC Communication ECP and Trusted Cloud Europe Cloud for Europe The Role of Identity Digital Enterprise Europe, London, 2014/06/11 Slide 26

24 eid and Cloud Computing Identification is where private sector and public sector applications often differ Unique ID is key in many public sector cases Unique ID often less relevant in private sector The same with and w/o Cloud, but GOVERNANCE AND CONTROL MUST NOT BE ENDANGERED ON THE WAY TO OR IN THE CLOUD Security i.e. eid and ENCRYPTION need external components to enable control standard interfaces, as well as independent, trusted providers Digital Enterprise Europe, London, 2014/06/11 Slide 27

25 eid and Mobile Devices secure element e.g. SIM software interacting with system and browsers security devices like smart card readers differences between standard PCs and mobile/ tablet devices call for rethinking eid. mobile phone based eid and signature proof to increase simplicity and acceptability. Digital Enterprise Europe, London, 2014/06/11 Slide 28

26 Example / Experience Austria Mobile ID vs. Card eid Take Up Digital Enterprise Europe, London, 2014/06/11 Slide 29

27 Example / Experience Austria Usage/Activations on a hot (32 C) Whit Sunday ~1 use/min Digital Enterprise Europe, London, 2014/06/11 Slide 30

28 Conclusions Public Sector Cloud Take-Up often still low Differs between states Trust, Security and Data Protection among the most quoted barriers Initiatives like ECP and Cloud for Europe to advance further Mobile devices call for rethinking security Digital Enterprise Europe, London, 2014/06/11 Slide 31

29 Thank You for Listening! and join Cloud for Europe at the 2 nd Market Consultation next week in London: Herbert.Leitold@a-sit.at Digital Enterprise Europe, London, June 11 th, 2014 Zentrum für sichere Informationstechnologie - Austria