Boosting Productivity and Innovation Through. Public Sector Compliant Cloud Services

Transcription

1 Boosting Productivity and Innovation Through Public Sector Compliant Cloud Services dr. Mišo Vukadinović IT and e-services Directorate Ministry of the Interior, Slovenia September 26, 2014

2 Agenda Cloud for Europe (C4E), FP7-ICT 1. Project Mission 2. Project Objectives 3. Expected Outcomes 4. C4E Major Deliverables 5. Challenges Addressed by C4E 6. Service Selection and Pre-Commercial Procurement

3 Project Mission Cloud for Europe brings together public authorities and industry to support public sector cloud use. Identify obstacles for cloud use in the public sector Define services hindered by those obstacles Procure research from industry to find innovative solutions for cloud services Give a clear view on public sector requirements and usage scenarios Establish suitable contractual terms for future cloud procurements

4 Project Objectives Enable public sector cloud adoption in open dialogue between public sector and industry Address concerns on data protection, security, legal and contractual aspects Support related research from industry Use of pre-commercial procurement (PCP) as an instrument for innovation in the public sector

5 Expected Outcomes Pre-commercial procurement terms, do's and don'ts, opportunities and pitfalls are understood Innovation through PCP research Public sector in Europe is empowered to procure cost-effective, secure and reliable cloud services A boost in cloud service usage within EU public sector

6 Phases of reference PCP process

7 C4E Project Partners

8 C4E Major Deliverables WP2 - Legal aspects of cloud services WP3 - Gap analysis Public sector study Study of market vendor offerings and PA requirements WP4 - PCP Preparation Services Catalogue WP5 - PCP Execution WP9 - Validation Exclusion, selection and award criteria for PCP Validation procedures WP10 - Communication Twitter, Linkedin, YouTube

9 Service List Consolidation Piloting Services 1. Basic Communication 2. Document Mgmt. and Collaboration 3. Customs Supply Chain 4. Customs Data Pipeline 5. Legislation-Aware Storage 6. European Citizen Initiative 7. Archive as a Service 8. Secure Personal Data and Document Vault 9. Documents and Files Interoperability Node 10. edocument Service 11. Restful Secure Distributed Collaboration Tools 12. Legislation Executing Cloud Services 13. Personal Digital Asset Service Horizontal Services 1. eid as a Service 2. Encryption as a Service 3. Independent Third Party Assurance 4. Public Administration Cloud Services Broker 5. Cloud Certification as a Service 6. Resilient Open-Source Cloud Services Stack 7. Changing the Cloud Provider

10 Final Services Selection Piloting Services Secure Legislation-Aware Storage Legislation Executing Cloud Services Horizontal Service Federated Certified Service Brokerage for EU Public Administration Cloud

11 Secure Legislation-Aware Storage Abstract / use case A cloud service procurer can: express its national (or local) legislative requirements and restrictions when procuring a cloud service have some control on the respect of the regulatory requirements during service execution Both sole storage or part of a service basis for a Personal Digital Asset service used to share documents and data between government and citizens/companies Cloud service encryption, archive and storage platform compliant with requirements of public administrations requirements and rights (access to personal data) of citizens

12 Secure Legislation-Aware Storage Issue Establish trust by contractual means Make easier the selection (and the procurement) of legislation compliant cloud (storage) services Make available new tools to manage the access rights of the citizens to personal data in a legislation compliant way Tackle with multiple regulations concerning the storing of data archiving disclosure restricted access to backups

13 Legislation Executing Cloud Services Abstract / use case A legislation executing cloud service is a cloud service, that accomplishes certain requirements imposed upon cloud actors by national or international legislation Provides another way of dealing with legal barriers Use case examples: Notify unauthorized access to data by hackers or intelligence surveillance Keep sensitive data within a given jurisdiction

14 Legislation Executing Cloud Services Aimed solution Solutions can take various forms: A framework (methodology, guidelines, specifications) Generic services to be combined with business services Services, integrated with business services

15 Federated Certified Service Brokerage for EU PA Cloud Abstract / use case Cloud services user in public administration should have an absolute guarantee that cross-border provided services are secure in terms of country and EU legislation, privacy protection and security. Country PA clouds are heterogeneous (Governmental Clouds, ENISA, 2013), at different stage of development and the only realistic way how to overcome fragmentation is the creation of a federated EU PA cloud. National/cross-border compliance guarantee should be provided through a dynamic real time cross-border service certification monitoring within Federated EU PA Cloud.

16 Federated Certified Service Brokerage for EU Issue and Aimed Solution Challenge is to create FCSB which will enable secure legislation-aware exploitation of cross-border provided services within Federated EU PA Cloud. Following issues should be resolved for EU Federated PA Cloud Interoperability Service governance Data portability Identity propagation

17 Federated Certified Service Brokerage for EU Issue and Aimed Solution Service certification Architecture of components, one for each property to be assessed Automated certification with assurance of consistency and elasticity Legislation awareness Legislation semantics standardization Interface for legislative changes propagation Legislation compliance assessment Service usage metering

18 How to engage? PCP tender release: September/October 2014 TED (Tenders Electronic Daily) C4E website

19 Stakeholder Group Visit to join! Project news (quarterly e-newsletter) Invitations to review progress and provide input at national and European stakeholder events Guidelines and training on the pre-commercial procurement process