Vivek Kundra – State of Public Sector Cloud Computing

What has NIST done for me lately?

By G C Network | January 4, 2016

According to a study, 82 percent of federal IT professional respondents reported that they were using the NIST (National Institute of Standards and Technology) cybersecurity framework to improve their security…

Future Ready in the API economy

By G C Network | December 17, 2015

The world of business is software. No matter the industry vertical or business model, effective software is the key to business success.  An even more important aspect of this reality…

Teradata: Embrace the Power of PaaS

By G C Network | December 11, 2015

Platform-as-a-Service (PaaS) has always been the unappreciated sibling of the cloud computing service model trio.  Existing in the dark shadow of the most widely adopted Software-as-a-Service (SaaS) and foundationally powerful…

Why cloud changes everything

By G C Network | December 6, 2015

How is cloud computing bringing society and its ideas closer together? This got me thinking. Last week the President of the United States started following me on Twitter. Now I…

The future of data security: An interview with Dell Fellow Tim Brown

By G C Network | November 22, 2015

The Dell Fellows program recognizes engineers for their outstanding and sustained technical achievements, engineering contributions and advancement of the industry. They are also seen as top innovators that have distinguished…

Hybrid IT Governance: Automation is Key

By G C Network | November 19, 2015

As cloud computing continues to grow in importance, enterprises are now facing a new realization.  In their almost rampant embrace of cost savings associated with public cloud, many are just…

Endpoint device management: Protecting the enterprise front door

By G C Network | October 29, 2015

Mobility and cloud computing have combined to obliterate any so-called network security perimeter. Corporate data has now been let loose to roam in a world of cyber thieves, manipulators and…

20 hybrid cloud insights from top industry experts

By G C Network | October 23, 2015

One cloud does not fit all organizations. That’s true whether it is a public or private cloud. A hybrid cloud option allows your business to create  a custom solution that…

Security requires long haul planning

By G C Network | October 13, 2015

On Tuesday, October 6th, the European Court of Justice (ECJ), invalidated the U.S./EU Safe Harbor Framework. This framework, in place since 2000, gave blanket permission to data transfers from the…

Cybersecurity through enterprise risk management

By G C Network | October 6, 2015

Cybersecurity is top of mind for corporations around the world. The quantity of recent data breaches and the dollar loss associated with some of them indicates either an underinvestment in…

Last week Federal Chief Information Officer Vivek Kundra release his report on the “State of Public Sector Cloud Computing”. The report not only details Federal budget guidance issued to agencies to foster the adoption of cloud computing, but it also describes 30 illustrative case studies at the Federal, state and local government level. As stated in the report:

“The Obama Administration is changing the way business is done in Washington and bringing a new sense of responsibility to how we manage taxpayer dollars. We are working to bring the spirit of American innovation and the power of technology to improve performance and lower the cost of government operations.”

Issuance of this report reinforces last week’s Washington, DC event during which the CIO pushed to engage closely with industry on this important journey towards cloud computing. A critical aspect of this journey is the development of cloud computing standards. Led by the National Institute of Standards and Technology (NIST) , these activities will facilitate industry adoption of high priority security, interoperability, and portability requirements. Current cloud computing standards development activities, conducted by the NIST Information Technology Laboratory (ITL), include:

Special Publications: NIST plans to issue an initial SP on cloud computing. The purpose is to provide insight into the benefits and considerations, and the secure and effective uses of cloud computing. More specifically, the document will provide guidance on key considerations of cloud computing: interoperability, portability, and security. To present these issues, the document will use the broadly recognized and adopted NIST Definition of Cloud Computing as a basis, given informal models of the major cloud computing service categories (Software as a Service, Platform as a Service, and Infrastructure as a Service). The publication will outline typical terms of use for cloud systems, will synopsize future research areas in cloud computing, and will provide informal recommendations.

Standards Acceleration to Jumpstart Adoption of Cloud Computing (SAJACC): The SAJAAC strategy and approach is to accelerate the development of standards and to increase the level of confidence in cloud computing adoption during the interim period before cloud computing standards are formalized. SAJACC will provide information about interim specifications and the extent that they support key cloud computing requirements through a NIST hosted SAJACC portal. More specifically, SAJACC will provide a public Internet-accessible repository of cloud computing usage scenarios (i.e., use cases), documented cloud system interfaces, pointers to cloud system reference implementations, and test results showing the extent to which different interfaces can support individual use cases.

Federal Risk and Authorization Management Program (FedRAMP): NIST, in the technical advisory role to the interagency Federal Cloud Computing Advisory Council (CCAC) Security Working Group will define an initial technical approach and process for FedRAMP consistent with NIST security guidance in the context of the Federal Information System Management Act (FISMA). To clarify the role of NIST with respect to FedRAMP, while NIST is supporting the definition of the FedRAMP process from a technical perspective, NIST is not the implementing organization. The governance and operational implementation of FedRAMP will be completed under the auspices of the Federal CIO Council.

I personally urge you to take a look at the case studies provided. Federal agency examples are impressive!

• Department of Defense (United States Army) – Army Experience Center
• Department of Defense (Defense Information Systems Agency) – Rapid Access Computing Environment
• Department of Defense (Defense Information Systems Agency) – Forge.mil
• Department of Defense (United States Air Force) – Personnel Services Delivery Transformation
• Department of Energy (Lawrence Berkeley National Labs) – Cloud Computing Migration
• Department of Health and Human Services – Supporting Electronic Health Records
• Department of the Interior – Agency-wide E-mail
• General Services Administration (Office of Citizen Services) – USA.gov
• General Services Administration – Agency-wide E-mail
• National Aeronautics and Space Administration (Ames Research Center) – World-Wide Telescope
• National Aeronautics and Space Administration (Jet Propulsion Laboratory) – Be A Martian
• National Aeronautics and Space Administration – Enterprise Data Center Strategy
• Social Security Administration – Online Answers Knowledgebase
• Federal Labor Relations Authority – Case Management System
• Recovery Accountability and Transparency Board – Recovery.gov Cloud Computing Migration
• Securities and Exchange Commission – Investor Advocacy System

Although these only represent the tip of the iceberg, they are also proof positive that the public sector’s move towards cloud computing is real and enduring

Bookmark and Share

Cloud Musings
( Thank you. If you enjoyed this article, get free updates by email or RSS – KLJ )

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

2 Comments

  1. Suzanne on October 14, 2010 at 7:50 am

    great post!



  2. James on April 21, 2013 at 12:25 am

    Department of Health's strong support to the new medical billing service assures the correct tax payment to the government. In doing so, our country could slowly recover from last year's recession. Practice management software locks down the information of patients' medical record. And this could help pattern the right tax to be paid.