Public Sector Chief Information Officer Council



Similar documents
Workplace Support Services Alliance Management Office Report December 2007 Report Against Project Goals

Server Consolidation. Report to the Joint Legislative Oversight Committee on Information Technology

Cloud Computing: Legal Risks and Best Practices

Industry Engagement Event. CLOUD COMPUTING SOLUTIONS CONSULTATION EN /A November 13 th, 2014 Delta Hotel, Ottawa.

Protecting Saskatchewan data the USA Patriot Act

Hosting and cloud services both provide incremental and complementary benefits to the organization

Common Student Information System for Schools and School Boards. Project Summary

REQUEST FOR INFORMATION. Hosted Website Solution and Services RFI #E Closing: March 24, 2015 at 2:00 pm local time.

Accountability Report. Department of Internal Services

ISSUE BRIEF. Cloud Security for Federal Agencies. Achieving greater efficiency and better security through federally certified cloud services

Strategic Transformation and Mainframe Services Project. Transparency Report. Period Ending March 31, 2010

Annex B. The Proposed Amendments AMENDMENTS TO NATIONAL INSTRUMENT MARKETPLACE OPERATION

GL2-\ Subject: Budget Amendment and Request to Begin Procurement Purchasing By-law Section 4.0 Replacement of Existing Recreation Software System

Bill C-27: First Nations Financial Transparency Act

Cloud Adoption and Procurement Practices. Prepared by:

2013 WAN Management Spectrum. October 2013

Consolidated I&T Data Centre - P3 Canada Fund

Data Sharing Agreements: Principles for Electronic Medical Records/Electronic Health Records

Service Excellence Strategy

Information Technology White Paper

DISASTER RECOVERY INSTITUTE CANADA WEBSITE PRIVACY POLICY (DRIC) UPDATED APRIL 2004

2014 HIMSS Analytics Cloud Survey

Federal Data Center Consolidation Initiative (FDCCI)

Manag. Roles. Novemb. ber 20122

HYBRID CLOUD: THE NEXT FRONTIER

Request for Proposal. Hypertension Management Program: Requirements Gathering and Options Analysis

CSA Z1600 Emergency Management and Business Continuity Programs

How To Understand Cloud Economics

CAPITAL REGION GIS SPATIAL DATA DEMONSTRATION PROJECT

Data Center Optimization: California s Blueprint for Success

State of Oregon Department of Consumer and Business Services Building Codes Division. Oregon epermitting

Cloud Computing; is it right for my business?

BUSINESS SECTOR STRATEGY:

IT Disaster Recovery Services Program

B130 Business Administration- Finance MTCU code Program Learning Outcomes

Auditor General s Office. Governance and Management of City Computer Software Needs Improvement

Report on Hong Kong SME Cloud Adoption and Security Readiness Survey

Data Centre Feasibility Study & Business Case for Sault Ste. Marie Request for Proposals

Company size matters: Perspectives on IT Governance

The Business Case for Cloud: Critical Legal, Business & Diligence Considerations

May, Initiative Overview

Framework for Cooperative Market Conduct Supervision in Canada

Cloud Computing in Vermont State Government

OCCUPATIONAL GROUP: Information Technology. CLASS FAMILY: Security CLASS FAMILY DESCRIPTION:

RISK ADVISORY SERVICES. HYDRO UTILITIES Overview of Internal Audit & Control Services: 2014 Credentials

ICT Services 2015/16 Strategy & Opportunities

BC Surgical Patient Registry (SPR) Communications Backgrounder

Review of Shared Services Canada s Collaborative Procurement Process

The text boxes in this document are for explanatory purposes only and are not part of the Instrument or the Companion Policy.

How To Ensure Health Information Is Protected

Developing a Policy for Bring Your Own Device. Report to the Joint Legislative Oversight Committee on Information Technology

WHITE PAPER Making Cloud an Integral Part of Your Enterprise Storage and Data Protection Strategy

Contents Executive Summary... 1 Highlights... 1

Request for Expressions of Interest On a contract to perform: Renewal of Information Technology Strategic Plan

EXCERPT SCOPE OF WORK RICHARD N. KATZ & ASSOCIATES ORIGINAL PROPOSAL TO NEVADA SYSTEM OF HIGHER EDUCATION OFFICE OF THE CHANCELLOR

Cloud Computing and Records Management

NATIONAL INSTRUMENT REGISTRATION REQUIREMENTS AND EXEMPTIONS. Table of Contents

Quick Guide: Managing ICT Risk for Business

Overview. FedRAMP CONOPS

Ministry of Education

13 PROPOSED REGION OF YORK EMERGENCY MANAGEMENT BY-LAW

The Use of Cloud Computing for the Storing and Accessing of Client Information: Some Practical and Ethical Considerations

Optimizing the Data Center for Today s Federal Government

CIC Summit Presentation: Settlement Programs in Saskatchewan

U.S. Department of Housing and Urban Development Data Center Consolidation Plan

Yokon Technical Property Guideline For Custom Software Development Contracts - Table of Contents

Wednesday, January 16, 2013

INSTITUTE FOR SAFE MEDICATION PRACTICES CANADA

Efficiency Scrutiny Committee 16 th September 2014 IT - Scrutiny of the Service Review process and viability of options for change

Anatomy of an IT Outsourcing Deal. Bruce Laco Deloitte John Pickett IT World Canada Barry Sookman McCarthy Tetrault

AN INTRO TO. Privacy Laws. An introductory guide to Canadian Privacy Laws and how to be in compliance. Laura Brown

What s the Path? Information Life-cycle part of Vendor Management

Information Technology Governance Overview and Charter

4.11. Ontario Works Program. Chapter 4 Section. Background. Follow-up on VFM Section 3.11, 2009 Annual Report

Digital government toolkit

Title Implementing Here a Shared Inspection Management System

North Carolina's Information Technology Consolidation Audit

Integrated Risk Management:

Sprint IaaS Cloud Computing - Case Study and Customers

Office of the Auditor General AUDIT OF IT GOVERNANCE. Tabled at Audit Committee March 12, 2015

Information Security Program CHARTER

Item No Halifax Regional Council September 24, 2013

Internal Audit of the Sport Canada Hosting Program

EFFECTS+ Clustering of Trust and Security Research Projects, Identifying Results, Impact and Future Research Roadmap Topics

MICROSOFT OFFICE 365 PRIVACY IMPACT ASSESSMENT. Western Student E-Communications Outsourcing

British Columbia Personal Information Protection Act. Frequently Asked Questions:

Planning a Backup Strategy

NSW Government Digital Information Security Policy

The City of Calgary, 2009 PSC Operational Review Final Report

Strategic Procurement Services

Mobile Event App. Request for Proposal. October 27, Closing Date and Time: November 21, 4:00 PM Pacific Time

Online Channel Office Project Alliance Management Office Report August 2011

IT Vendor Due Diligence. Jennifer McGill CIA, CISA, CGEIT IT Audit Director Carolinas HealthCare System December 9, 2014

CONTRACT FOR PROVISION OF CLINICAL AND MEDICAL SERVICES

State of Montana. Office Of Public Instruction IT Strategic Plan Executive Summary

Service Delivery Review

Cybersecurity in the States 2012: Priorities, Issues and Trends

How To Save Money On A Data Center

Transcription:

Report to Public Sector Chief Information Officer Council White Paper on a Pan Canadian Opportunities for Collaboration Project Goal Two Report: Outline and Approach Draft v1.0 Submitted by: Stuart Culbertson Consulting Director Sierra Systems Group Inc. (T) (250) 385 1535 (F) (250) 385 4761 (E) stuartculbertson@sierrasystems.com

Table of Contents 1. Overview...1 2. Approach...1 3. Findings Summary...2 3.1 Opportunities for Inter-Jurisdictional Collaboration...2 3.1.1 Procurement Collaboration...2 3.1.2 Development Lab Space for Testing Infrastructure...3 3.1.3 Public Sector Cloud...4 3.1.4 Disaster Recovery...5 3.1.5 Cooling Technologies [To be Completed]...5 3.2 Critical Success Factors for Inter-Jurisdictional Collaboration [To be Completed]...6 4. Next Steps...6 5. Appendices...7 5.1. Project Profiles for Goal Two Collaboration Opportunities...7 5.2. Inter-Jurisdictional Collaboration White Paper...7 Confidentiality/Validity This document has been prepared by Sierra Systems for the sole purpose and exclusive use of Public Sector Chief Information Officer Council. Due to the confidential nature of the material in this document, its contents should not be discussed with, or disclosed to, third parties without the prior written consent of Sierra Systems. White Paper: Pan Canadian Opportunities for Collaboration Project Goal Two Report Draft v1.0 / Page i

NOTE: This document outlines the approach and framework we are pursuing for our project Goal Two Report. It should be read both as a framework and a work in progress, as it sets placeholders and identifies areas that we need to detail with further work over the next two months. We intend to combine our Goal One report [now Final] with our Goal Two report [under development here] into a final, consolidated project report. 1. Overview The PSCIOC has sponsored a project to develop a White Paper that will explore the prospects and feasibility of inter jurisdictional collaboration in sharing data centres. The project will include the exploration of how PSCIOC member jurisdictions might share data centre facilities, consolidate data centre requirements, aggregate procurement for common data centre infrastructure and collaborate on similar opportunities of mutual interest while maintaining independent operating environments. Specifically, the work will focus on two goals that will be pursued simultaneously in the data gathering phase but will be reported on in sequence. These goals are: Goal One: Goal Two: To determine provincial/territorial and municipal government interest (and associated requirements) in co sharing data centre facilities with Shared Services Canada. To determine the prospects for PSCIOC member collaboration in data centres and strategies in areas of mutual interest now and going forward with a particular focus on cloud data platforms. The purpose of this report is to provide findings and recommendations based on collaboration opportunities identified by PSCIOC Survey Respondents in response to Goal Two. 2. Approach As agreed upon in the work plan presented to PSCIOC members on September 26, 2012, Sierra Systems developed and issued a survey for completion by PSCIOC members in an effort to gain a better understanding of the current state, future goals, and overall interest in collaboration on data centres and strategies among Federal, Provincial/Territorial and Municipal governments. Responses were received from ten out of 13 jurisdictions. A Findings Report in support of Goal One was prepared and circulated to PSCIOC members in December 2012. Preliminary feedback was received from the Federal government (Shared Services Canada). Subsequent to the survey, further information was requested from select jurisdictions. While no survey response was received from municipal government members, an interview was held with both PSCIOC municipal representatives who indicated that interest and decisions on co location and collaboration would best be determined on a municipality by municipality basis. Survey results, combined with select interviews with CIOs, have helped to identify five potential opportunities for collaboration beyond data centres, in support of Goal Two. A draft description of these Project Goal Two Report: Outline and Approach Draft v1.0 / Page 1

opportunities is included in this report and will provide the basis for further development throughout February and March 2013. In addition, the analysis conducted to date has helped to yield a number of Critical Success Factors for Collaboration, which are both highlighted in this report, and referred to in the accompanying attached Discussion Paper on Inter Jurisdictional Collaboration [To be attached as Appendix 5.2 ]. 3. Findings Summary Goal Two: To determine the prospects for PSCIOC member collaboration in data centres and strategies in areas of mutual interest now and going forward with a particular focus on cloud data platforms. During the survey conducted among PSCIOC members in October 2012, respondents were asked to identify other potential opportunities for areas of inter jurisdictional collaboration beyond co location of data centres. In total, five potential opportunities emerged: 1. Procurement Collaboration 2. Development Lab Space for Testing Infrastructure 3. Public Sector Cloud 4. Disaster Recovery 5. Cooling Technology Follow up interviews were then held in February 2013 with select officials on the subjects of: Procurement Collaboration (Federal Government), Development Lab Space for Testing Infrastructure (Saskatchewan), Public Sector Cloud (BC) and Cooling Technology collaboration (Ontario to be scheduled). An additional interview was conducted with Stuart Fuller, the Chief Technology Officer for the State of Montana, to gather best practices for inter jurisdictional collaboration an area in which Montana has shown nationally acknowledged leadership in the US over the past year. This section of the report contains high level project descriptions and desired outcomes for the opportunities which have been defined so far through the interview process. Collaboration Project Profile templates have also been created to frame the further analysis and development of these opportunities over the next weeks (see Appendix 5.1 of this report). 3.1 Opportunities for Inter Jurisdictional Collaboration The following opportunities were identified by PSCIOC members in our October 2012 survey and subsequent select interviews as noted above: 3.1.1 Procurement Collaboration Opportunity for Collaboration Described While differing in some standards and requirements, PSCIOC member jurisdictions are generally in the same business with respect to data centre services and facilities. In some cases, Project Goal Two Report: Outline and Approach Draft v1.0 / Page 2

members have adopted a build our own approach for some aspects of their needs. However, as a general trend, build our own approaches are being increasingly replaced by PSCIOC member sourcing and provisioning of data centre and service requirements from third party partners. For those members that have evolved along this line, there are significant opportunities to procure together especially where policies and standards align for data centres and services. Examples could include: Aggregated supply arrangements for data centre hardware and services including common terms and conditions and best available pricing commitments The procurement of a common or standard portal for the provision of open data to citizens and businesses Extension of best available pricing arrangements across the PSCIOC membership perhaps beginning with a few PSCIOC collaborators and extending to many Project Desired Outcomes The desired outcomes of procurement collaboration include: Cost reduction stronger negotiating power for all jurisdictions through aggregated demand, resulting in lower vendor rates and a consistent offering at a consistent price irrespective of jurisdiction size Improved service to citizens and business through a common and unified approach to open data provision for citizens and businesses interested in and working across multiple jurisdictions Improved vendor relationships through common procurement terms and conditions and product and service standards across Canada 3.1.2 Development Lab Space for Testing Infrastructure Opportunity for Collaboration Described Most PSCIOC jurisdictions have independently established test environments for data applications and hardware. In addition, many are exploring cloud environments as potential new testing centres. Given that many of the applications and hardware being tested are either common (i.e. Windows migrations) or at least comparable and operating within a similar framework of jurisdictional policies and standards, there is an opportunity for PSCIOC members to collaborate in shared testing infrastructure. Members with available testing capacity could host a collaborative venture among interested members. To date, concerns around the sharing of citizen data across jurisdictions in production environments has posed a barrier to collaboration. However, this opportunity would not involve data sharing and is focused on data applications and infrastructure thereby mitigating the perceived risks around sharing of real citizen data. PSCIOC collaboration here could be supported by a usage based accounting model to ensure fairness and balance across varying jurisdictional sizes, budgets and requirements. Project Goal Two Report: Outline and Approach Draft v1.0 / Page 3

Project Desired Outcomes The desired outcomes of collaboration on test facilities as a service (vs. in a physical centre) include: Cost avoidance sharing testing infrastructure and services may be able to avoid/reduce costs from the current model of investing in independent testing environments in each jurisdiction. A larger testing environment benefitting from economies of scale could enable just intime provisioning, with the opportunity to scale up and down in response to workloads. Potential to jointly explore and evaluate the prospects of setting up new, innovative testing infrastructure in the cloud allowing all jurisdictions interested in such a move to explore the benefits and risks together. 3.1.3 Public Sector Cloud Opportunity for Collaboration Described Cloud services promise the potential of providing flexible, just in time data service needs to large volume users who might be more inclined to consume data storage as a service rather than from supported, independent physical infrastructures. At the same time, there are several perceived risks to PSCIOC members in moving their data storage needs to the cloud including privacy, data protection and security and the need of some to comply with their legislative and regulatory requirements not to store data outside of their jurisdiction. As various modes of cloud computing are rolled out public cloud, private cloud, etc. there may be an opportunity for PSCIOC members to collaborate on a public sector cloud that could be built in compliance with common or similar regulatory, policy and standards requirements among members. There is also a broader opportunity to collaborate at the strategy level perhaps in developing a statement of common conditions and requirements that PSCIOC members could present to cloud service developers who would be interested in providing services to Canadian jurisdictions. Project Desired Outcomes A shared public sector cloud has multiple benefits to participating jurisdictions, including: Expanded user choice, increased flexibility, and lowered cost through reduced asset ownership. A Canadian based public sector cloud that could address security, data protection and privacy requirements and considerations that are held in common among PSCIOC members Cost and effort avoidance in developing a joint rather than several jurisdiction specific public sector cloud(s) Demonstrating collaborative leadership in jointly exploring the benefits and implications of a data service game changer and leading technology trend Project Goal Two Report: Outline and Approach Draft v1.0 / Page 4

Reference Models BC Broader Public Sector Cloud Hosting strategy collaboration among provincial public sector CIOs in BC (Province, Crown Corporations, Health Authorities) 3.1.4 Disaster Recovery Opportunity for Collaboration Described All PSCIOC jurisdictions require secure and dependable disaster recovery back up sites for their data centre and access needs. Presently, jurisdictions contract private vendors or disperse backup requirements among other public data facilities. Given the comparability of PSCIOC member data policies, standards and regulatory and operating frameworks and requirements, the opportunity exists for PSCIOC members with spare capacity to offer back up sites and services to other members. This could take the form of: Multiple jurisdictions working together equally to provide back up services for each other in the event of downtime A single jurisdiction with an operational advantage (geographic suitability, superior existing infrastructure, etc.) acting as a disaster recovery centre of excellence, and contracting space and/or services to other jurisdictions Project Desired Outcomes The desired outcomes of PSCIOC member collaboration on disaster recovery include: Ensuring data back up sites are operated in compliance with a comparable, Canadian public sector data policies, standards and regulatory framework Providing an increased capacity of back up centres and potentially decreasing the likelihood of disaster effects through leveraging centres of excellence Reference Models Montana Oregon agreement on disaster recovery, which sets up offsite storage for disaster recovery in each other s data facilities 3.1.5 Cooling Technologies [To be Completed pending interview with Ontario] Project Goal Two Report: Outline and Approach Draft v1.0 / Page 5

3.2 Critical Success Factors for Inter Jurisdictional Collaboration [To be Completed] Throughout this project to date, a number of critical success factors for inter jurisdictional collaboration have been identified, and are included in this section of the report. Our research suggests there are several critical success factors in establishing and enabling effective interjurisdictional collaboration in action to improve program efficiencies and service delivery. [To be drawn from Discussion Paper on Inter jurisdictional Collaboration To be completed]. 4. Project Next Steps The findings and recommendations for Goal Two provided in this report have been focused so far on what needs to happen with regards to collaboration opportunities. Significant opportunities have been identified, each with their own real and perceived barriers to collaboration. None of these barriers, however, are insurmountable and can be tested and overcome through the development of strategic collaboration pilot projects. Therefore it is recommended that the next steps in this project be focused on how to turn these ideas into action. Next steps in the current project plan are as follows: Activity Completion date Deliverable Present the Final Report on Goal One Recommendations (revised from feedback on the draft report above). 28 February 2013 Presentation of Draft Report on Goal Two Findings and Recommendations. (Halifax PSCIOC Meeting) Final Report on Goal One Recommendations Draft Report on Goal Two Findings and Recommendations Further input from PSCIOC members on Goal Two Collaboration Opportunity Profiles Present the Final Report on Goal Two Recommendations (revised from feedback on the draft report above). Compile final project White Paper summarizing the work, conclusions, recommendations and implementation considerations detailed in the Goal One and Goal Two reports. 31 March 2013 PSCIOC Data Centre Collaboration White Paper Project Goal Two Report: Outline and Approach Draft v1.0 / Page 6

5. Appendices 5.1. Project Profiles for Goal Two Collaboration Opportunities [Final to be attached] 5.2. Discussion Paper on Inter jurisdictional Collaboration [Final to be attached] Project Goal Two Report: Outline and Approach Draft v1.0 / Page 7