Cloud Computing Masterclass - World...
Transcript of Cloud Computing Masterclass - World...
![Page 1: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/1.jpg)
Cloud Computing Masterclass
Andrew Stott
Senior Consultant, TWICT
formerly Deputy UK Gov CIO
Washington
27 Feb 2013 v0.4
@dirdigeng
![Page 2: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/2.jpg)
What is Cloud Computing?
2
![Page 3: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/3.jpg)
Perhaps not such a new idea?
3
![Page 4: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/4.jpg)
Cloud Computing
4
“Cloud computing is a model for enabling
ubiquitous, convenient, on-demand network
access to a shared pool of configurable
computing resources (e.g., networks,
servers, storage, applications, and services)
that can be rapidly provisioned and released
with minimal management effort or service
provider interaction.”
NIST, US
![Page 5: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/5.jpg)
Cloud Computing
5
“Cloud computing is a model for enabling
ubiquitous, convenient, on-demand
network access to a shared pool of
configurable computing resources (e.g.,
networks, servers, storage, applications, and
services) that can be rapidly provisioned
and released with minimal management
effort or service provider interaction.”
NIST, US
![Page 6: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/6.jpg)
Cloud Computing
6
“A standardised IT capability delivered via
Internet technologies in a pay-per-use, self-
service way.”
Forrester Research
![Page 7: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/7.jpg)
Cloud Computing: Essential Characteristics
On-demand self-service
Broad network access
Resource pooling
Rapid elasticity
Measured service
7
![Page 8: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/8.jpg)
Cloud is a Game Changer
8
![Page 9: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/9.jpg)
One of these ….
9
![Page 10: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/10.jpg)
… can now use one of these
10
![Page 11: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/11.jpg)
… or part of one of these …
11
![Page 12: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/12.jpg)
… using only one of these
12
![Page 13: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/13.jpg)
For SMEs and innovators it changes this
…
13
![Page 14: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/14.jpg)
… into this
14
![Page 15: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/15.jpg)
Startups and SME users
disproportionately benefit
Access to enterprise-class software as a
service
Better security and resilience at lower cost
No premises costs
Fewer skills requirements
Easier access to business building blocks (eg
e-commerce, payment systems, CRM, ERP)
15
![Page 16: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/16.jpg)
Cloud Service Models
16
![Page 17: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/17.jpg)
Cloud Computing: Service Models
17
Model Application
Software
Middleware (eg integration
libraries,
database s/w)
Servers &
Storage
Examples
Infrastructure
As A Service
Consumer Consumer Provider Amazon
EC2/S3
Rackspace
Platform As A
Service
Consumer Provider Provider Google App
Engine
Microsoft
Azure
Software As A
Service
Provider Provider Provider Google Apps
Salesforce
![Page 18: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/18.jpg)
Cloud Computing: Deployment Models
18
Model Location Infrastructure Platform Application
Public Cloud Off
premises
Community
Cloud
Off
premises ? ()
Private
Cloud
On or off
customer
premises ?
Hybrid
On and off
customer
premises
![Page 19: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/19.jpg)
Benefits and Risks
19
![Page 20: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/20.jpg)
Cloud Computing: Benefits
Cost Saving
Staff savings
Resilience
Business Flexibility
20
![Page 21: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/21.jpg)
Cloud Computing Benefits: Cost Saving
Utilisation 10-20% 80-90%
Commoditisation
Use of capital
“Scale down” as well as “scale up”
21
![Page 22: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/22.jpg)
Cost savings come from?
22
Standardisation
Simplification Sharing
![Page 23: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/23.jpg)
Cloud Computing Benefits: Staff Saving
Automated management
User-led provisioning
Leveraging of skills
23
![Page 24: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/24.jpg)
Cloud Computing Benefits: Resilience
Uptime
Built-in backup and redundancy
Fit-for-purpose data centres
Disaster Recovery
Surge Capacity
24
![Page 25: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/25.jpg)
Cloud Computing Benefits: Business Flexibility
Better lead-time/time-to-market
Scalability
Fewer infrastructure constraints
Greater standardisation
Variable business geometry
25
![Page 26: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/26.jpg)
Cloud Computing: Benefits
26
Benefit Stream
Cost Saving Utilisation 10-20% 80-90%
Commoditisation
Use of capital
“Scale down” as well as “scale up”
Staff savings Automated management
User-led provisioning
Leveraging of skills
Resilience Uptime
Disaster Recovery
Surge Capacity
Business
Flexibility
Better lead-time
Fewer infrastructure constraints
Greater standardisation
Variable business geometry
![Page 27: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/27.jpg)
Issues
Cyber-security
ICT infrastructure
Legal/regulatory framework
Territoriality
Vendor Lock-in
Business continuity
Governance
27
![Page 28: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/28.jpg)
Cloud: Cyber-security
28
Issues Opportunities
Confidentiality/
Integrity
Shared system risks
(possibly) path to internet
Lack of control of entire
stack
Extra-territoriality
Software-maintained
configuration
Well-established
abstraction layers
Availability Dependency on
connection
Contention with other
customers
Data loss still possible
Easier to handle
surge in demand
Basic resilience as
standard
More advanced
resilience/recovery
easier/cheaper
What are the risks of the legacy system?
![Page 29: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/29.jpg)
ICT Infrastructure issues
Always-on megabit-class broadband?
80%+ coverage of system users?
Good low-latency international connectivity?
Trusted payment mechanisms?
Sufficient potential market for localisation?
Integration skills?
29
![Page 30: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/30.jpg)
Regulatory Framework and Territoriality
Regulation by outcome or by
process/technology?
Applicable law for contract?
Location of data?
‒ Privacy law
‒ National security issues
“PATRIOT Act” concerns?
30
![Page 31: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/31.jpg)
Vendor Lock-In and Business Continuity
What happens if the vendor goes bust?
Can you get at your data
‒ To integrate with other services?
‒ To move to another supplier?
Who owns the data?
Can the data be used with other software?
What will this mean for training?
What’s the Business Continuity plan?
31
![Page 32: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/32.jpg)
Governance
Vendor-proofing the Enterprise Architecture
Information asset and contract tracking
Incentivising, controlling and managing use of
Cloud in the supply chain
Mandating appropriate use of the Cloud by
Business Units
Flow of funding
Controlling “around the edges” use of Cloud
32
![Page 33: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/33.jpg)
Questions so far?
33
![Page 34: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/34.jpg)
Exercise 1
34
![Page 35: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/35.jpg)
Which applications are most suitable for
1. Public Cloud
2. Private Cloud
3. Not suitable for cloud at all
35
![Page 36: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/36.jpg)
Email?
36
![Page 37: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/37.jpg)
Desktop (Docs, spreadsheet)?
37
![Page 38: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/38.jpg)
Project Management?
38
![Page 39: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/39.jpg)
Collaborative working?
39
![Page 40: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/40.jpg)
ERP: Finance, HR, Procurement?
40
![Page 41: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/41.jpg)
Sales?
41
![Page 42: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/42.jpg)
Military Command and Control?
42
![Page 43: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/43.jpg)
Company Register?
43
![Page 44: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/44.jpg)
Railway Signalling?
44
![Page 45: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/45.jpg)
Open Data?
45
![Page 46: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/46.jpg)
Customer Relationship
Management?
46
![Page 47: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/47.jpg)
Public-facing Government
Websites?
47
![Page 48: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/48.jpg)
e-Government systems?
48
![Page 49: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/49.jpg)
Population Register?
49
![Page 50: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/50.jpg)
Control systems for a nuclear
power plant?
50
![Page 51: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/51.jpg)
Cadastral Records?
51
![Page 52: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/52.jpg)
Mapping?
52
![Page 53: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/53.jpg)
Software Development and
Testing?
53
![Page 54: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/54.jpg)
Taxation?
54
![Page 55: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/55.jpg)
E-Voting?
55
![Page 56: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/56.jpg)
Review
56
![Page 57: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/57.jpg)
Applications
57
Desktop (Docs,
spreadsheet)
Project Mgmt
Collaboration
ERP: Finance, HR
Sales
Military Command and
Control
Company Register
Railway Signalling
Open Data
Customer Relationship
Management
Public Websites
eGovernment systems
Population Register
Control of Nuclear Weapons
Cadastral Register
Mapping
Software Development and
Testing
Taxation
e-Voting
![Page 58: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/58.jpg)
The Cloud Market
58
![Page 59: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/59.jpg)
What parts of the ICT market are affected?
59 Market size data: Forrester Research
Low
High
Medium
Impact
![Page 60: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/60.jpg)
IT Market changes
New entrants in Infrastructure, Platform and
Software
Traditional IT players highly conflicted
Telcos familiar with cloud infrastructure model
For G-Clouds, PPP is a feasible model
Lower barriers to entry for software providers
‒ Lower upfront capex by using cloud
infrastructure
‒ Lower marketing and distribution costs
‒ Easy access to international markets
60
![Page 61: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/61.jpg)
So the IT market is changing too. From ….
61
![Page 62: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/62.jpg)
… to new players such as these
62
![Page 63: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/63.jpg)
SAAS is predicted to dominate long-term
63 Source: Forrester Research
![Page 64: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/64.jpg)
SAAS on IAAS
64
![Page 65: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/65.jpg)
“G-Cloud”
Cloud for Government
65
![Page 66: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/66.jpg)
Singapore
66
Private IAAS
5+5 years
Singtel
Public IAAS
2+2 years
Singtel
Contracts
awarded
2012
![Page 67: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/67.jpg)
Moldova
67
M-Cloud 2
Wider range of services
Public-private
partnership
Feasibility stage
M-Cloud 1
Private IAAS
Existing estate
Gov owned
Now live
![Page 68: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/68.jpg)
United Kingdom
68
“Cloudstore”
access to public
cloud services
462 suppliers
(75% SMEs)
3185 services
Re-compete every
6 months
“Accredit Once”
“G-Host”
Private Data
Centre/Cloud
![Page 69: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/69.jpg)
G-Cloud Policy Drivers
Save Money!
but also
Improve time-to-market
Increase effective resilience ‒ Reduce risks in legacy datacentres
‒ Make system continuity affordable
‒ Make surge capacity affordable
Break traditional IT supplier model
Allow faster innovation, both IT and business
Facilitate business integration
Vehicle for requiring effective IT governance 69
![Page 70: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/70.jpg)
Questions
70
![Page 71: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/71.jpg)
Exercise 2
71
![Page 72: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/72.jpg)
Some of the usual Open Data excuses
It’s held separately by n different organisations, and we can’t join it up
It will make people angry and scared without helping them
It is technically impossible
We do not own the data
The data is just too large to be published and used
Our website cannot hold files this large
We know the data is wrong
We know the data is wrong, and people will tell us where it is wrong
We know the data is wrong, and we will waste valuable resources
inputting the corrections people send us
People will draw superficial conclusions from the data without
understanding the wider picture
People will construct league tables from it
It will generate more Freedom of Information requests
It will cost too much to put it into a standard format
It will distort the market
Our IT suppliers will charge us a fortune to do an ad hoc extract
72
![Page 73: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/73.jpg)
Exercise 2
You are part of the Management Team of the
IT Director of the Ministry of Drains
The Government CIO is proposing that your
applications should move to his new “G-
Cloud” under his control
Let’s brainstorm at least 20 reasons why your
applications should not move
73
![Page 74: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/74.jpg)
Review
74
![Page 75: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/75.jpg)
G-Cloud Issues
Cyber-security
ICT infrastructure
Legal/regulatory framework
Territoriality
Vendor Lock-in
Business continuity
Governance
75
No surprises here!
![Page 76: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/76.jpg)
G-Cloud issues: Cyber-security
Don’t try and put everything in the Cloud
‒ But consider consolidation of remainder
“Accredit Once” (UK Cloudstore, US
FedRamp, private IAAS) allows rigorous
assessment with lower compliance costs
Significant proportion of the IT “estate” does
not hold sensitive data
‒ Development and testing configurations
‒ Many public-facing systems
Be realistic about state of legacy estate
76
![Page 77: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/77.jpg)
G-Cloud: implications for procurement
Providers tend to shape the market
Requirements-led specifications may not give
optimal solutions
Capability-led specifications raise new issues
Prime Contractor model needs to be adapted
Client side integration skills important
Risk allocation, not simple risk transfer
Low-cost, commodity, model makes high bid
costs untenable for some vendors
“Thick” integration layer absorbs most/all of
financial and non financial benefits
77
![Page 78: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/78.jpg)
G-Cloud: implications for governance
Is there a Central IT Office with the authority
and resources to sustain a “Cloud First”
policy?
How is Cloud brought to individual
Ministries/applications – through the market
or through a central provider?
How will funding for cloud flow through the
Government? What is the best structure for
charging out shared assets?
How will requirements be managed to avoid
pushing up costs?
78
![Page 79: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/79.jpg)
Cloud-ready Government?
Effective cross-government ICT leadership?
Effective ICT governance?
Full ICT cost awareness?
Standards-based approach to cyber security?
Results not inputs culture?
Suitable Ministry to be “G-Cloud broker”?
Sufficient critical mass?
79
![Page 80: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/80.jpg)
Questions?
80
![Page 81: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/81.jpg)
Exercise 3
81
![Page 82: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/82.jpg)
Getting a G-Cloud going
How would you get a cloud initiative running
in your Government/Sector/Region/Country?
What would “cloud readiness” look like?
‒ Governance?
‒ Finance?
‒ Skills?
‒ Technology?
‒ Leadership?
82
![Page 83: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/83.jpg)
Review
83
![Page 84: Cloud Computing Masterclass - World Bankpubdocs.worldbank.org/.../7/...Days-2013-andrew-stott-worldbank-clo… · G-Cloud issues: Cyber-security Don’t try and put everything in](https://reader034.fdocuments.us/reader034/viewer/2022042314/5f02b73b7e708231d405a6e4/html5/thumbnails/84.jpg)
End
84