Cloud up to business processes

Chris Francis IBM Technical Relations and Regulatory Affairs Cloud up to business processes Chris Francis

Existing state of play Conventional solutions Software as a Service Platform as a Service Infrastructure as a Service Technology orientated User Orientated Infrastructure

Existing state of play Cloud Specific reference projects and standards (indicative) Software as a Service Platform as a Service Apache Nuvem CSA Cloud Trust Protocol Oasis Open Group Cloud Reference Architecture Identity in the cloud Infrastructure as a Service DMTF OVF Apache Libcloud Openstack Object Storage DMTF Cloud Auditing Federation WG SNIA CDMI CSA Cloud controls Matrix ISO/IEC JTC1 WG Data Privacy/ Protection NWIP CSA Cloud Audit Openstack Image Service Openstack Compute Apache DelatCloud OCCI Infrastructure DMTF Cloud Management

Existing state of play Cloud Relevant standards (indicative) Software as a Service Platform as a Service Infrastructure as a Service IETF OAuth OASIS SAML Open ID Authentication ISO 27001 W3C XML Digital DMTF WS- signature ISO 27002 Management IETF X.509 W3C XML Certificates and Encryption PKI OASIS KMIP OASIS WS- Reliable Messaging ISO 19770-3 OASIS XACML OASIS WS- Security OASIS WS-I Web Services Profile REST OGF GridFTP W3C SOAP W3C WSDL W3C WS- Addressing IETF TCP/IP OASIS WS- Security Profiles IETF HTTP/HTTPS IETF FTP W3C WS-Transfer JSON Data & Document Standards

Existing state of play key issues Identify priorities for resources Limit replicating work Identify and limit overlap Encourage unification and liaison Encourage appropriate representation and key requirements into existing efforts especially public sector User input essential especially higher up the stack

Cloud Computing Reference Architecture (submitted to Open Group) Cloud Service Consumer Cloud Service Provider Cloud Service Creator Cloud Services Common Cloud Management Platform (CCMP) Cloud Service Integration Tools Existing & 3 rd party services, Partner Ecosystems Business-Processas-a-Service Sof tware-as-a-service Platf orm-as-a-service Operational Support Services (OSS) Business Support Services (BSS) Service Creation Tools Consumer In-house IT Inf rastructure-as-a-service Inf rastructure Security, Resiliency, Performance & Consumability Governance

Up to Business Process Conventional solutions Software as a Service Platform as a Service Infrastructure as a Service Business + service components and business logic = Business Process as a Service Infrastructure

Business Process as a Service key issues No longer cloud specific for Policy Regulation Certification Highly Sector or cluster orientated Normally common criteria or non-competitive focus Highly relevant to public sector Club Clouds clusters of users using either the same cloud or using clouds built to common specifications Unlocking scale efficiencies on a sector wide basis CUSTOMER LEADERSHIP CRITICAL

Cloud Standards Customer Council http://www.cloud-council.org There is a lack of a customer driven prioritization and focus within the cloud standards development process The Cloud Standards Customer Council will: Drive customer requirements into the development process to gain acceptance by the Global 2000 Deliver customer-focused content in the form of best practices, patterns, case studies, use cases, and standards roadmaps. Influence the standards development process for new cloud standards. Facilitate the exchange of real-world stories, practices, lessons and insights.

Principles for an Open Cloud Open Cloud Manifesto: A statement of principles for openness in cloud computing Existing standards should be reused, All standards efforts should be based on customer requirements, Standards development efforts should stay coordinated The Goal is to raise awareness and educate customers on dangers of potential vendor lock-in associated with proprietary cloud technologies. A catalyst for standards organization coordination. More than 400 businesses are supporting. The social networking Community consists of over 1800 Individuals. Become a supporter at opencloudmanifesto.org IBM Confidential

Barriers to club cloud Avoid market fragmentation Existing standards, regulations and certifications need to be cloud ready not cloud specific. International basis for standards, regulations and certifications is key Public sector input into technical requirement and common user criteria Single market in services for cross border provision Communications networks and services E-commerce Data protection Privacy