Infrastructure Architecture Blueprint. 26 January 2011

Transcription

1 Infrastructure Architecture Blueprint 26 January 2011

2 Contents Introduction to Infrastructure Architecture Blueprint Current Environment Overview Infrastructure Architecture Framework Strategic Recommendations Proposed Strategies and Implementation Approach for Infrastructure Architecture Blueprint Implementation Roadmap Proposed Governance Structure 1

3 Current Environment Overview and dframework

4 Current Environment Overview Disparate network services & connectivity Disparate data centre & disaster recovery centre infrastructure Non-standard end-user computing standards High cost of maintenance Inefficiencies in ICT infrastructure operations Non optimised resource utilisation 3

5 KPMG Technology Framework 4

6 Strategic Recommendations and dimplementation Approach

7 To Be Strategies Overview Objective To increase public sector productivity, add value to services and improve efficiencies through a whole-of- of government approach on ICT infrastructure. Areas of Concern Public Sector ICT infrastructures are currently not fully optimised due to redundancies and inefficiencies resulting from disparate ICT Infrastructure. Strategy Consolidation of Public Sector Network Consolidation of Data Centres and Disaster Recovery C t Establishment of Public Sector Cloud Computing Infrastructure re Standardise End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Centres Infrastructure Solutions Source 6

8 Strategies Implementation Methodology Laying the Foundation Pilot Projects Implementation & Roll-out Establish governance, roles and responsibilities. Define policies, procedures, processes and standards. Gather public sector & agency requirements. Establish change management plan. Conduct current environment assessment. Selection of pilot site. Impact assessment of pilot implementation. Implementation on pilot site. Post implementation review to identify areas of improvement. Plan enhancement based on lessons learned. Project roll-out to agency sites. Establish project management and monitoring. Establish performance measurement processes. Conduct impact assessment study for benefits realisation. Continuous improvement. 7

9 Strategy 1: Consolidation of Public Sector Network To support policy purpose specified in RMK10 - Consolidation of WAN. Integrated whole-of-governmentof network connecting federal, state and local government. Agencies may access government applications from any government office locations. Agencies may access all government applications from a single network access. Foundation to enable infrastructure consolidation & support future technology infrastructure (e.g. cloud computing). Key Benefits Reduced cost of procurement and services. Increased responsiveness to organisational change. Enhanced service standards. Greater assurance of interoperability and security. New opportunities for more efficient information sharing. 8

10 Strategy 1: Consolidation of Public Sector Network Implementation Approach Prioritisation of agency network consolidation** Impact Assessment Integration Simulation Network migration Federal agency network consolidation Local Authority network consolidation State agency network consolidation Assessment of the overall impact of the network migration to agencies applications, network security and connectivity requirements. Establish migration plan for the network and related applications. Establish test environment and plans for the network migration. Simulate the network integration to test the impact of the network migration to the agency s network connectivity and security requirements. Migration of the network connectivity and services to the single public sector network. Establish agency level standard operating procedures for network and security operations. **Prioritisation will be based on factors such as current network contractual timeframe, complexity of application integration and agency front line functions. 9

11 Strategy 1: Consolidation of Public Sector Network Responsibilities Responsibilities Responsibilities of MAMPU To establish a working group within the Jawatankuasa Infrastruktur ICT for the Public Sector network consolidation initiative for project coordination and monitoring. To develop the policies related to the governance, procurement, security, management and operational aspects of the consolidated Public Sector network. To develop the strategies and project implementation plan for network consolidation with regards to the aspects of technical implementation, security, progress monitoring and promotions. To develop the framework agreements with regards tonetwork procurement from service provider and network provisioning i i for Agencies with flexible commercial and technical requirements. To manage the contractual agreements between the Public Sector and third party network service providers with regards to deliverables acceptance and payment disbursement. To develop a change management plan to establish the buy-in from Agencies to centralise the network services and consolidate the network of Public Sector Agencies. To conduct an assessment framework for Agencies network and impact of the network migration to the Agencies applications. 10

12 Strategy 1: Consolidation of Public Sector Network Responsibilities Responsibilities Responsibilities of MAMPU To develop a plan for phased migration of Agencies network connectivity and services with pilot projects and prioritisation according to Agencies mission criticality and information sharing requirements. To provide assistance and guidelines for the Agency s network migration and related network configuration and application changes required during migration. Responsibilities of Agencies To conduct an assessment of the Agencies network according to the assessment framework to study the impact of the network integration to the public sector network. To develop a network migration plan including critical dependencies, network hardware and software configuration changes, application changes and technical recovery processes for the implementation of the Agency s network migration. To provide resources during the Agency s network migration and related network configuration and application changes required during migration. To develop change management plan for the Agency to address organisational changes due to the network consolidation initiative. 11

13 Infrastructure Architecture Network Consolidation Guideline 12

14 Infrastructure Architecture Network Consolidation Guideline 13

15 Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres Data Centre Consolidation This strategy to support policy purpose specified in RMK10 - Consolidation of DC and DRC. Consolidation of data centres across the states accordingly under different regions for Federal agencies (e.g. Northern, Southern, Central, East Coast, Sabah and Sarawak). Consolidation by states for State Government. Local Authorities data centres may be consolidated in either Regional or State data centres. The number of consolidated data centres will depend on the quantity of agency servers and the capability of the data centres. Key Benefits Substantial savings in operating cost and energy consumption. Improved service standards. Encourage sharing of techniques, expertise and innovation among agencies sharing a data centre. Financial investment can be focused on operating highend data centres. 14

16 Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres Implementation Approach Implementation Roadmap Implementation Approach Prioritisation of agency DC/DRC consolidation** Target Data Centre Selection Impact Assessment Server Relocation Federal agency DC/DRC consolidation Local Authority DC/DRC consolidation Selection of target data center for consolidation. Gather agency s requirements for hosting applications in consolidated data center environment. Assessment of the overall impact of the data center relocation to agencies business, applications, security and connectivity requirements. Development of business continuity plans for the agency. Establish relocation strategy & plan for agency s servers and hardware equipments. Relocate the servers and hardware equipments into the consolidated data center. State agency DC/DRC consolidation **Prioritisation will be based on factors such as.infrastructure readiness and agency front line functions. 15

17 Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres Responsibilities Responsibilities of MAMPU To establish s a work group within the Jawatankuasa a a Infrastruktur u ICT for the data a centre e and disaster recovery e centre e consolidation initiative for project coordination and monitoring. To conduct feasibility study to identify target data centre for consolidation purposes. The study should highlight the impact with regards to law and regulations, compliance, application migration, technology integration and process. To develop the policies related to the governance, procurement, security, management and operational aspects of the consolidated data centre. To develop a change management plan to establish the buy-in from agencies to centralise the data centre facility services by region or state. To develop a plan for phased implementation of agencies data centre consolidation with pilot projects and prioritisation according to agencies mission criticality. To advise agencies on data centre relocation strategy and activities. To develop the framework agreements with regards to data centre space provisioning from service providers and public sector agencies. 16

18 Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres Responsibilities Responsibilities of Agencies To identify agency data centre design, specification, technology architecture and capabilities. Additionally, agency should also inventorise the existing data centre assets which include applications and hardware. To conduct an impact assessment study on application migration and data centre assets relocation. To identify and recommend agency data centre relocation strategies to the central agency. To develop or review own Disaster Recovery Plan to align with the consolidation strategy. 17

19 Infrastructure Architecture Data Centre & Disaster Recovery Centre Consolidation Guideline 18

20 Infrastructure Architecture Data Centre & Disaster Recovery Centre Consolidation Guideline 19

21 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure Public Sector Cloud Computing Infrastructure Development of Private Cloud for the public sector for total control and security. Enables agencies to select and host ICT services from a secure, scalable and cost-effective shared environment. Agencies will be able to obtain access to various cloud services through web portal which can be provided on-demand with rapid provisioning. Agencies procurement process will be faster. Key Benefits Substantial savings due to sharing of common services, applications and infrastructure. Enable services to be provided on demand. Enable faster provisioning of resources. Minimise redundancies. 20

22 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure EG Apps. OSCC Apps. Virtual Desktop Gov2.0 tools Office Automation Website Hosting Knowledge Management Storage Developer Tools Server Unified Communication Testing Tools Virtual Machines Network Database 21

23 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure Cloud Computing Dimensions Five distinct dimensions focused on key aspects, as necessary to plan and implement comprehensive cloud computing capabilities Finance - Cloud Computing Business Case - Chargeback Metrics & Models Controls - Laws, Regulations & Business Requirements Impacting Cloud Models - Audit Impact & Considerations - Application criticality - Cloud provider SLA contracts - Conformance to Standards, Continuous Improvement Technology - Technology Integration - Technology Architecture Standardization - POC Review - Application Rationalization - Technology Standardization Organization - Operating in the Cloud - Organizational Changes - Organization Change Management - Skills, Roles and Responsibilities - Right-Sizing - Governance Framework Process - Impact on IT Service Management Processes - Change, Release, Config - Incident, Problem - Capacity Provisioning - Vendor Management - Process Metrics 22

24 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure Implementation Approach Implementation Roadmap Implementation Approach Prioritisation of Cloud Services** Consolidation & Virtualisation Automation Service Operationalisation Infrastructure-as-a- Service cloud offering Platform-as-a- Service cloud offering Software-as-a- Service cloud offering Consolidation of server, storage, and network resources by utilising virtualisation technology. Comprehensive virtualisation management: o Configuration management o Capacity planning o Performance monitoring o Real-time automation Integration of management tools that manages all resources (server, storage, network) as a single pool that can be allocated on demand. Identification of cloud service requirements which consists of technical and functional requirements. Integration of a web portal with the cloud resource management tools to offer cloud services to public sector agencies. **Prioritisation will be based on factors such as service estimated utilisation, service provisioning complexity and infrastructure readiness. 23

25 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure Responsibilities Responsibilities of MAMPU To establish awork group within the Jawatankuasa Infrastruktur ICT for the cloud computing initiativeiti for project coordination and monitoring. To review and/or develop policies related to governance, procurement, chargeback, service provisioning, security, service management and operational aspects of the Cloud Computing infrastructure. t To develop a change management and communication plan to establish the buy-in from agencies to utilise the services provided within the cloud. To develop a comprehensive cloud computing strategy and plan which covers but not limited to identification of cloud services, development of technical implementation plan, development of standards roadmap, identification of security policy issues, service acquisition and provisioning roadmap, development of detailed technical cloud architecture. To develop comprehensive marketing plan that focuses on creating awareness and encouraging agencies to use the cloud services offered. To identify potential collaboration with the local industry in order to foster new sources of growth in the ICT sector. 24

26 Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure Responsibilities Responsibilities of Agencies To support the consolidation of Public Sector network and data centres initiatives which are the key enablers to the cloud computing initiative. To be involved in the cloud services requirement study and development to ensure services provided meet the Agency s need, requirements and expectations. To review Agency-level policies and procedures to support the utilisation of cloud computing technology. To develop change management plan for the Agency to address organisational changes due to the utilisation of cloud computing. 25

27 Infrastructure Architecture Cloud Computing Deployment Guideline 26

28 Strategy 4: Standardise End-User Computing Infrastructure Baseline requirement of ICT infrastructure for all public sector agencies. Each agency places of work should have access to PCs and printers, official , Internet, office application and end-point security (e.g. antivirus & personal firewall). Common desktop platform and centralised ICT procurement. Standard hardware & software maintenance policy framework. Integration of Green ICT practices. Key Benefits Agencies infrastructure will be at par with latest technology standards and best practices. Reduced procurement costs through economies of scale. Increased efficiency in deployment and maintenance. Greater assurance of up to date end-point security. 27

29 Strategy 4: Standardise End-User Computing Infrastructure Implementation Approach Implementation Roadmap Implementation Approach Prioritisation of agency EUC standardisation** Develop Baseline Requirements Policy Development EUC Infrastructure Standardisation Federal agency EUC standardisation Local Authority EUC standardisation State agency EUC standardisation Develop baseline requirements of ICT infrastructure for public sector agency. Establish technology and technical standards for ICT infrastructure within the public sector that are based on various agency and user requirements. Development of policies including for procurement and lifecycle management for ICT infrastructure within the public sector. Establish a centralised ICT infrastructure lifecycle management processes. Standardise di the ICT infrastructure management and lifecycle across all public sector agencies. Assessment of agencies ICT infrastructure environment to identify the requirements for the development of roll-out plan. **Prioritisation will be based on factors such as infrastructure availability, current infrastructure lifespan and agency front line function. 28

30 Strategy 4: Standardise End-User Computing Infrastructure Responsibilities Responsibilities of MAMPU To publish policy and establish centralised governance structure and processes to manage the standardisation of end-user computing infrastructure. To define policies, procedures, processes and standards related to end user computing standardisation. To execute its role as the technical advisor to the Ministry of Finance and Public Sector Agencies for the development and implementation of the standardized end user computing. To identify a baseline requirement for the Public Sector end user computing infrastructure software and hardware technology, and to develop an EUC baseline standard for the Public Sector. To advise Ministry of Finance on the Public Sector EUC technical standards and the appointment of panel of vendors to supply EUC infrastructure. To perform project management and monitoring i of the standards d implementation, ti including performance measurement processes to identify targets and key accomplishments, plus impact assessment studies for benefits realisation. To develop a plan for phased implementation of the standardisation of end user computing infrastructure and integration with Public Sector Agencies current environment. 29

31 Strategy 4: Standardise End-User Computing Infrastructure Responsibilities Responsibilities of Ministry of Finance To define policies, processes and procedures for the procurement of Public Sector end user computing infrastructure. To appoint a panel of vendors to supply EUC infrastructure and to provide an online ordering mechanism for Agencies to access and order EUC infrastructure based on its requirements. Responsibilities of Public Sector Agencies To conduct an assessment of the Agencies specific business requirements and identify any possible specialised end user computing requirements. To develop change management plan for the Agency to address organisational changes due to the standardisation di ti of end user computing environment. 30

32 Infrastructure Architecture End User Computing Guideline Proposed Specification Specifications Specifications Processor Multi Core x86 architecture with support for 64 Processor Multi Core x86 architecture with support for 64 Bit Bit Computing, minimum 1.8 GHZ Computing, minimum 2.2GHz Input / Output Ports Minimum 2x USB 2.0 ports Input / Output Ports Minimum 4x USB 2.0 ports Motherboard Integrated sound and network features, Motherboard Integrated sound and network features, supports Supports 2x USB2.0 ports 4x USB2.0 ports RAM Minimum 2GB DDR2 RAM Minimum 4GB DDR2 Hard Disk Drive Minimum i 160GB, supports SATAII and Hard Disk Drive Minimum i 320GB, Supports SATAII and 8MB 8MB Cache Cache Optical Drive Internal Rewritable DVD Drive, Minimum x8 Optical Drive Internal Rewritable DVD Drive, Minimum x16 Basic System Speed Video Adapter Minimum 64MB shared Video Memory, supports minimum resolution of 1280x1024 Network Interface 10/100/1000 Ethernet LAN and / or High End System Speed Video Adapter Minimum 128MB dedicated video memory, supports minimum resolution of 1280x1024 Network Interface 10/100/1000 Ethernet LAN and / or b/g wireless WIFI adapter b/g wireless WIFI adapter Software Operating System, Office Automation Application, Software Operating System, Office Automation Application, Personal Security (Anti-Virus and Firewall), Internet Browser Personal Security (Anti-Virus and Firewall), Internet Browser and and Client. Use Open Source Software where possible. Client. Use Open Source Software where possible. Keyboard and Mouse QWERTY 101 Keyboard and Keyboard and Mouse QWERTY 101 Keyboard and Optical Optical Scroll Mouse Scroll Mouse Warranty All hardware and software must have a minimum Warranty All hardware and software must have a minimum of of twelve (12) months parts and labour warranty from the date twelve (12) months parts and labour warranty TITLE15 November from the date 2011 of 31 of delivery. delivery.

33 Infrastructure Architecture End User Computing Guideline EUC User Classification End User Level EUC Classification Top Level Management (Head of Division and Above) Recommended for top level management: High End Laptop Basic Desktop Mobile Smart Phone Recommended for management level staff from Recommended for professionals with work requirements Management (Grade 41 and grade 41 and above: for high computing resources: above) Desktop* Desktop* Operational / Administrative / Technical Staff Recommended for ICT facing clerical / administrative staff, operational staff, helpdesk staff, and ICT facing technical staff from grade 41 and below: Basic Laptop or Desktop* * Dependant on mobility requirements 32

34 Infrastructure Architecture End User Computing Guideline 33

35 Strategy 5: Development of Common Security Infrastructure Centralised Security Management A centralised log and security event management infrastructure. Enabling the automation of log aggregation, correlation, and intelligent analysis centrally, to accelerate recognition & response to incidents. Federated Identity & Access Management Federated identity management with a portable identity concept. Seamless navigation between different applications while maintaining a single login identity. Integration of current PKI services into the Federated IAM framework. Data Leakage Protection Classification of data to identify the sensitivity of information transmitted through electronic channels. Establishment of policies and processes to manage the data lifecycle and prevent unauthorised data movement. Key Benefits Strengthens the overall public sector ICT security. Cost effectiveness in ICT security infrastructure procurement & operations. Centralised reporting for compliance and eliminating vulnerabilities. Facilitates swift and quicker security response. Public Sector ICT Study 34

36 Strategy 5: Development of Common Security Infrastructure Implementation Approach Implementation Roadmap Prioritisation of agency IAM & DLP integration ** Federal agency IAM & DLP integration Local Authority IAM & DLP integration State agency IAM & DLP integration Develop Centralised Platform Development of the centralised security management tools & DLP solution to integrate the security & data leakage detection and incident handling mechanism. Development of the Federated IAM standard platform to unify the provisioning and management of identity in the public sector. Implementation Approach Integration Establish plan for implementing the Federated IAM & DLP solution to agency sites. Assessment of agency applications to identify the integration ti requirements with the Federated IAM platform & DLP solution. Integration of agency applications / end user computing environment with the Federated IAM platform & DLP solution. Operation Establish standard operating procedures for the security & data leakage detection and incident handling through the centralised security management platform & DLP solution. Establish standard operating procedures for the provisioning and management of identity through the Federated IAM platform KPMG, a company incorporated under the Malaysian Companies Act 1965 and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative ( KPMG International ), a Swiss entity. All rights reserved. Printed in Malaysia. **Prioritisation will be based on factors such as application identity mapping requirements, application readiness and integration value. 35

37 Strategy 5: Development of Common Security Infrastructure Responsibilities Responsibilities of MAMPU To establish a work group within the Jawatankuasa Infrastruktur ICT for the centralised security management initiative for project coordination and monitoring. To define and establish the criteria for assessment of ICT Security & Compliance in the Public Sector based on MS ISO/IEC 27001:2007. To develop automation ti tools for the purpose of continuous auditing of ICT Security for Public Sector Agencies. To develop the policies related to the governance, management and operational aspects of the Centralised Security Management infrastructure. To develop the policies related to the governance, management and operational aspects of the Federated Identity and Access Management infrastructure. To develop a change management plan to establish the buy-in from Agencies for the implementation of the Federated IAM framework across Public Sector and integration of the Federated IAM into Agencies applications. To conduct an assessment framework for Agencies applications with a high-value and high-impact for the implementation of the Federated IAM framework. To develop a Federated IAM platform solution as a shared service which integrates with the identity repositories of Agency applications. 36

38 Strategy 5: Development of Common Security Infrastructure Responsibilities Responsibilities of MAMPU To develop a plan for phased implementation of Federated IAM and integration with Public Sector applications including enterprise-wide (EG) applications, community applications and Agency-specific applications. To develop a change management plan to establish the buy-in from Agencies for the implementation of the Data Leakage Prevention framework. To conduct an assessment framework for Agencies to identify data classification, location and pathways within the Agencies. To establish high level policies for data leakage prevention including defining the specific classifications, handling mechanism of each data category, violation actions and escalation processes. To develop a Data Leakage Prevention solution to automate the monitoring and blocking of data leakage violations. 37

39 Strategy 5: Development of Common Security Infrastructure Responsibilities Responsibilities of Agencies To conduct an assessment of the agencies applications according to the assessment framework to study the impact and value of the integration and implementation of the Federated IAM framework. To assist in integration of the Federated IAM platform into the agency s application. To assist in integration of the Data Leakage Prevention platform into the Agency s application and end-user computing environment. 38

40 Infrastructure Architecture Common Security Infrastructure Guideline ICT Security & Compliance 39

41 Infrastructure Architecture Common Security Infrastructure Guideline Identity & Access Management 40

42 Infrastructure Architecture Common Security Infrastructure Guideline Data Leakage Prevention 41

43 Strategy 6: Deployment of Mobile Computing Solutions Development of backend infrastructure to support mobile computing technologies. Development of mobile applications to enhance government service delivery. Enabling business/ citizens as well as government employees to access and use government services and applications anytime, anywhere and anyhow. Key Benefits Access to government applications and services anytime, anywhere and anyhow. Increase delivery of services through various service delivery channels. Increase operational efficiency and productivity. Reduce operational costs. 42

44 Strategy 6: Deployment of Mobile Computing Solutions Implementation Approach Implementation Roadmap Prioritisation of agency mobile computing deployment** Federal agency deployment Local Authority deployment State agency deployment Develop Backend Infrastructure Conduct assessment on agency s mobility requirement. Identity strategic initiatives that can be best resolved with mobility. Identify government mobility strategy based on above assessment. Strategy should include addressing security concerns. Develop backend infrastructure that is able to support various technologies in mobile computing. Implementation Approach Develop Mobile Applications Identify mobile applications to be developed based on value to the citizen, businesses and government employees. Development of mobile applications based on potential utilisation. Operation Staging of mobile devices to apply standard d settings and installation of applications. Establish centralised management of the mobile devices that includes device monitoring, automatic patch and security updates. **Prioritisation will be based on factors such as.infrastructure readiness and agency front line functions. 43

45 Strategy 6: Deployment of Mobile Computing Solutions Responsibilities Responsibilities of MAMPU To establish a work group within the Jawatankuasa Infrastruktur ICT for the public sector mobile computing initiative for project coordination and monitoring. To identify the requirements of the agencies with regards to information flow and mobility to develop the requirements of the mobile computing solution for citizen and business service delivery. To identify the requirements of the public sector mobility working requirement to develop the mobile computing solution for increasing productivity of public sector employees. To develop the backend infrastructure to support mobile computing technologies in a robust and high-performance environment. To develop a mobile computing solution as a shared service to be used across public sector agencies. To revise and update the relevant policies with regards to public sector mobility requirements and facilitating the use of mobile computing within the public sector. Responsibilities of Agencies To conduct an assessment of the agencies applications and gather the relevant information requirements for introducing mobile services. 44

46 Infrastructure Architecture Mobile Computing Deployment Guideline INFRASTRUCTURE ARCHITECTURE GUIDELINE 30 November

47 Strategy 7: Increasing Usage of Open Source Adopt usage of open source software wherever it gives the best value for money in delivering public services. Increasing public sector IT personnel s exposure to open source standards. Government uses open standards in its procurement specifications and requires all future solutions to comply with open standards. Integration of open source with infrastructure related solutions and tools such as government cloud and mobile applications. Key Benefits Cost savings delivered via the reuse of applications and solutions. Avoidance to being locked in to costly proprietary software. Increased potential for further development and customization of IT solutions within the public sector. Minimal licensing and developmentelopment costs. Maximized accessibility to OSS solutions across agencies. 46

48 Strategy 7: Increasing Usage of Open Source Implementation Approach Implementation Roadmap Implementation Approach Achieve targets in OSS Master Plan II Identify OSS Solutions Strategy Development OSS Standardisation OSS offered in a mobile computing environment OSS offered in a cloud computing environment Identify Solution Areas of ICT infrastructure to be implemented. Identify OSS initiatives, agencies involved and OSS migration processes for the ICT infrastructure within the public sector based on various agency and user requirements. Establish OSS personnel development and awareness initiatives across agencies. Integrate OSS into government mobile & cloud computing infrastructure to facilitate accessibility. Standardise OSS adoption within the ICT infrastructure management and lifecycle across all public sector agencies. Perform reviews, enhancements and accelerated development of OSS initiatives to ensure continuity. 47

49 Strategy 7: Increasing Usage of Open Source Responsibilities Responsibilities of MAMPU To conduct feasibility study to identify opportunities to develop and use open source software to support centralised infrastructure management and operation. To develop and specify OSS related standards, guidelines and policies for all public sector OSS implementations. To facilitate, coordinate, advice and assist all public sector agencies for OSS related implementation. To conduct and coordinate OSS training, certification and awareness initiatives for public sector ICT personnel. To conduct, facilitate t and monitor OSS research and development initiatives. iti To create and maintain OSS knowledge bank for the sharing of OSS related knowledge and experience. To provide technical support to all public sector agencies for all OSS implementation. To identify suitable common OSS ICT infrastructure management tools for development and implementation across the public sector. 48

50 Strategy 7: Increasing Usage of Open Source Responsibilities Responsibilities of Agencies To comply with OSS standards, guidelines and policies for every possible ICT infrastructure implementation. To consider OSS in all ICT infrastructure procurement, lifecycle management and processes. To encourage all of its ICT personnel to obtain OSS training and certification. 49

51 Infrastructure Architecture Open Source Software Deployment Guideline 50

52 Infrastructure Roadmap

53 ICT Infrastructure Roadmap 0-1 years Pilot Projects Establish pilot project for Public Sector Network, Cloud Computing Infrastructure, End-User Computing Standardisation and Mobile Computing deployment. 1-2 years Public Sector ICT Infrastructure t Integration Consolidation of Data Centers within Putrajaya & Klang Valley areas (Federal agencies). Development of Federated Identity and Access Management to selected agencies. 2-5 years Public Sector ICT Infrastructure Optimisation Complete consolidation of the Public Sector Network. Expansion of cloud computing services. Consolidation of regional Data Centers. Provisioning of Infrastructure as a Service. Provisioning of Platform as a Service. Provisioning of Software as a Service. 52

54 ICT Infrastructure Implementation Plan Project Phases Plateau 1 ( 12 Months ) Plateau 2 ( 18 Months) Plateau 3 ( 18 Months) Plateau 4 ( 12 Months ) Consolidation of Public Sector Network Consolidation of Data Centre and Disaster Recovery Centre Establishment of Public Sector Cloud Computing Infrastructure Infrastructure Architecture Strategic Roadmap Standardise End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Source Infrastructure Architecture Change Management Year Plateau 1 Establishing the governance structure and processes as well as Pilot Projects for the strategies Plateau 2 Deployment of initiatives to federal and front line agencies Plateau 3 Deployment of the initiatives to the remaining federal, state and local government agencies Plateau 4 Monitoring and ensuring continuous improvement of the infrastructure management and operations o 53

55 To Be Governance Model ICT Infrastructure

56 To-Be Governance Structure ICT Infrastructure Steering Committee Jawatankuasa ICT Sektor Awam (JISA) Coordinating Committee Working Committee Management & Operations Jawatankuasa Perlaksanaan dan Koordinasi Program ICT Jawatankuasa Infrastruktur ICT Centralised Management & Operation Entiity Plan, monitor and coordinate the development of ICT infrastructure. Recommend relevant policies, standards and strategies to JISA. Report on the status of development and progress of ICT infrastructure projects Monitor and coordinate the implementation and operation of network infrastructure, DC, DRC and Cloud Computing infrastructure; and Resolve implementation and operational issues. Manage the day to day operation and service provisioning related to public sector ICT infrastructure. 55

57 To-Be Governance Structure ICT Infrastructure Centralised Management & Operation Entity coordinates procurement services from service providers & provisioning of services to agencies. Provider A Provider B Provider C Infrastructure Standards Agreement Centralised Management & Operation Entiity Ministry Agency State Agency Agency PBT Infrastructure Provisioning Agreement Infrastructure Procurement Agreement Se ervice Level Agre eement Standardised procurement and service level agreements across public sector. Centralised budget for public sector infrastructure provisioning. Centralised monitoring of service provision including service levels & infrastructure operations. 56

58 Summary and Moving Forward Summary and Moving Forward Plans

59 Summary and Moving Forward Plans Objective To increase public sector productivity, add value to services and improve efficiencies through a whole-ofgovernment approach on ICT infrastructure. Strategy Consolidation of Public Sector Network Consolidation of Data Centres and Disaster Recovery Centres Establishment of Public Sector Cloud Computing Infrastructure Standardise End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Source Moving Forward: Establishment of governance structure in the form of Jawatankuasa Infrastruktur ICT and Centralised Mgmt and Operation Entity; Development of detail implementation plan for each program which include conducting requirement study and developing technical design; and Project implementation and monitoring. 58

60 Summary Strategy #3 : Establishment of fcloud dcomputing Infrastructure Strategy #7: Increasing Usage of Open Source Strategy #6: Deployment of Mobile Computing Solutions Strategy #5: Development of Common Security Infrastructure Strategy #2: Consolidation of DC and DRC Strategy #1: Consolidation of Public Sector Network Strategy #4: Standardisation di i of fend duser Computing Infrastructure 59

61 Infrastructure Architecture Q&A Session Thank You 60