Presentation to AGA April 20, 2017 Mike Teller Steve Wilson
Agenda: What is cloud computing? What are the potential benefits of cloud computing? What are some of the important issues agencies need to consider when going to the cloud? What is Idaho s cloud computing policy?
What is Cloud Computing? Simply refers to applications and services offered over the Internet with a fee for service model where you only pay for what you use SaaS-Software as a Service IaaS-Infrastructure as a Service PaaS-Platform as a Service Federal government has a cloud first strategy
What are the 4 primary deployment models? Public cloud Services are rendered and the infrastructure provided is for public use. While separated virtually, your applications and data will reside on the same servers and storage devices with other customers. The service and infrastructure may be owned, managed and operated by a 3 rd party, government, or some combination, and will exist on the premise of the cloud provider.
Private Cloud The cloud infrastructure (server and storage) are used solely by one customer. The service and infrastructure may be owned, managed and operated by the agency, a 3 rd party or a combination, and may be hosted on or off premise.
Community Cloud The cloud infrastructure is provided for the exclusive use of a specific community of customers that have shared concerns such as government. It may be owned, managed and operated by one of the members of the community, a 3 rd party or some combination, and be hosted on or off premise. Hybrid Cloud Some combination of public, private or community cloud deployment models
Core elements of delivering services over the Internet from a remote location- Users must have: 1) Redundant connectivity to the Internet 2) Adequate bandwidth 3) Provider reliability 4) Security 5) Privacy 6) Tangible economic value (Reddick, 2012)
Benefits of Cloud Computing Reddick, 2012 Rapid scalability and deployability Improved resource utilization Improved collaboration capabilities Ability to engage in usage based pricing Capacity for on-demand and computation power Decreased maintenance costs Improved economies of scale Green friendly Reduced info technology infrastructure needs Improved disaster recovery capabilities
Key considerations when going to the cloud Vendor experience & capability (size matters) Information security (vendor certifications) Data breech procedure & responsibility Location and ownership of data Service levels-who s responsible for what and what are the financial consequences for nonperformance
Key considerations continued Application performance Indemnification Warranty Exit strategy Auditability Opex vs Capex All these and more must be specifically addressed in the contract
Idaho cloud computing policy (P1080) Designed to assist agencies to weigh the benefits vs the risks of Cloud Services The risks are: Exposure of data that has been entrusted to the state Vital services in 3 rd party hands rather than with state personnel Contract management expertise displacing technical engineering expertise in the state workforce
Policy Directives Give the highest priority to the security of confidential state data Keep an inventory of all cloud services The must be an explicit state owner of each cloud service Follow the NIST cyber security model Have documented contingency plans All Cloud services will be actively monitored by the state
Challenges moving forward This is a new procurement model and the rules are still being developed. The funding model is very different than traditional IT funding and it will take time for budget and legislators to understand the paradigm shift from capital to ongoing operating costs. This is a very different model for the State of Idaho, the concept of our data not actually being kept within the 4 walls of a state agency will also be a difficult concept for state decision makers to understand.
Cloud solutions are best when they are large scale How to take advantage of cross agency and even cross jurisdictional opportunities? How to leverage network investments in the Treasure Valley and the rest of Idaho to build the require robust networks? How to build citizen confidence and buy in to build communities of knowledge to leverage these investments to benefit the public?
Questions? Contact mike.teller@tax.idaho.gov stephenwilson@boisestate.edu