European Cloud Computing Strategy Key actions and state of play Jorge GASOS DG Connect, European Commission Jorge.Gasos@ec.europa.eu
Impact on providers and users Cloud services: market forecast Supply side: new business opportunities for telecom operators, cloud services providers and system integrators Demand side: increased productivity, enhanced competitiveness, faster deployment of advanced IT services, especially for start-ups and SMEs Many potential users still associate cloud computing with increased risks, such as: privacy, security, continuity of services, legal jurisdiction, etc.
Policy context: Cloud Computing Strategy 27 September 2012: COM on Unleashing the Potential of Cloud Computing in Europe. Accompanying Staff Working Document The strategy is designed to stimulate the uptake of cloud computing across the economy Three key actions: Mapping cloud relevant standards Fair and safe contracts and SLAs European Cloud Partnership 3
Progress Key action 1: Standards mapping by ETSI Cloud Standards Coordination Conference Brussels - December 2013 Cloud-CERT - list of certification schemes ENISA list (February 2014) and Meta-framework Mid-2014 Key action 2: Cloud Service Level Agreements Guidelines document Mid 2014 Code of conduct (data protection) Draft to Art 29 WP February 2014 Aim endorsement during this Commission Cloud Contract Group First results Mid 2014 Key action 3 Steering Board Trusted Cloud Europe Visions Document March 2014 Cloud 4 Europe project Official launch 14 November 2013 Pre-notice April, call for tender early summer 2014 4
Key Action 1-1 ETSI CSC Structure and Timeline Launched in December 2012 Workshop in Cannes, co-organized by EC, 200+ participants Definition of work structure: 3 TGs, a coordination group ( reference ) TG1 for definition of Roles and TG2 for collection of Use Cases TG3 in charge of Use Case Analysis and Production of the Report ETSI Support: Laurent Vreck ETSI @ CSC Workshop 10/12/12013
15/07/14 6
Key action 2-1 SLAs: Creating A Common Vocabulary of Understanding Purchaser s Dilemma Cloud Contracts are not comparable and use different definitions I don t know which Cloud Delivery Options are right for my specific need I don t know if I have considered the most important aspects for this contract SIG SLA Support Template SLAs and Terms and Conditions Cloud Decision Flowchart Cloud Contract Checklist
Fair Contract Terms and Conditions Service Level Agreements (Cloud Select Industry Group) data preservation after termination of the contract, data disclosure and integrity, data location and transfer, ownership of the data, direct and indirect liability change of service by cloud providers and subcontracting
Key action 2-2 Code of Conduct on DP: Background Directive 95/46/EC art 27 encourages adoption of codes of conduct and their endorsement by art 29 Working Party EC Cloud Computing Strategy of 29-09-2012 Work with industry to agree a code of conduct for cloud computing providers to support a uniform application of data protection rules which may be submitted to the Article 29 Working Party for endorsement in order to ensure legal certainty and coherence between the code of conduct and EU law.
PCP - PPI Pre-Commercial Procurement Public Procurement of Innovative solutions PCP to steer the development of solutions to public sector needs / validating alternative solution approaches from various vendors PPI to act as launching customer / early adopter / first buyer of innovative commercial end-solutions newly arriving on the market R&D / Pre-commercial Procurement (PCP) Public Procurement of Innovative Solutions (PPI) Phase 0 Curiosity Driven Research Phase 1 Solution design Supplier A Supplier B Supplier C Supplier D Phase 2 Prototype development Supplier B Supplier C Supplier D Phase 3 Original development of limited volume of first test products / services Supplier B Supplier D Phase 4 Deployment of commercial end-products Diffusion of newly developed products / services Supplier(s) A,B,C,D and/or X multiple sourcing
ICT 8-2015 Pre-commercial procurement for public sector cloud computing services (PCP) common requirements and terms of reference for future procurement of cloud computing services 9 M ; large projects; PCP Public procurement of innovative cloud computing solutions (PPI) organizing joint procurement of innovative cloud services by public authorities 13 M ; large projects; PPI 11
ICT 8-2015 Building on work undertaken by the project C4E: www.cloudforeurope.eu 12
European Cloud Partnership Steering Board: Trusted Cloud Europe Report Consultation: March - May
Roadmap
Priorities Agreement on harmonised EU data protection Safer more consistent contracts and means to resolve disputes Moving from formal to functional requirements for data location Encourage Cloud-Active procurement policies
Research and Innovation Continuing core research in cloud computing Cloud as an enabler of new applications (Big Data, IoT) What is beyond Cloud Computing? Software a key driver for productivity and growth Open source development and innovation Cloud supporting industrial / public sector innovation Cloud as an enabler for SMEs / startups
Further Information Horizon 2020 www.ec.europa.eu/research/horizon2020 Digital Agenda Cloud Computing https://ec.europa.eu/digital-agenda/en/ telecoms-and-internet/cloud-computing Join us in this exciting journey 17