Cloud regulatory impact

Slide title

70 pt

CAPITALS

Slide subtitle

minimum 30 pt

REGULATORY IMPLICATIONS CLOUD

Slide title

44 pt.

Text and bullet level 1

minimum 24 pt.

Bullets level 2-5

minimum 20 pt.

Characters for Embedded font: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~¡¢£¤¥¦§¨©ª«¬®¯°±²³´¶·¸¹º»¼½ÀÁÂÃÄÅÆÇÈËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷

øùúûüýþÿĀāĂăąĆćĊċČĎďĐđĒĖėĘęĚěĞğĠġĢģĪīĮįİıĶķĹĺĻļĽľŁłŃńŅņŇňŌŐőŒœŔŕŖŗŘřŚśŞşŠšŢţŤťŪūŮůŰűŲųŴŵŶŷŸŹźŻżŽžƒȘșˆˇ˘˙˚˛˜˝ẀẁẃẄẅỲỳ–—‘’‚“”„†‡•…‰‹›⁄€™ĀĀĂĂĄĄĆĆĊĊČČĎĎĐĐĒĒĖĖĘĘĚĚĞĞĠĠĢĢĪĪĮĮİĶĶĹĹĻĻĽĽŃŃŅŅŇŇŌŌŐŐŔŔŖŖŘŘŚŚŞŞŢŢŤŤŪŪŮŮŰŰŲŲŴŴŶŶŹŹŻŻȘș−≤≥fifl

ΆΈΉΊΌΎΏΐΑΒΓΕΖΗΘΙΚΛΜΝΞΟΠΡΣΤΥΦΧΨΪΫΆΈΉΊΰαβγδεζηθικλνξορςΣΤΥΦΧΨΩΪΫΌΎΏ

ЁЂЃЄЅІЇЈЉЊЋЌЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯЁЂЃЄЅІЇЈЉЊЋЌЎЏѢѢѲѲѴѴҐҐәǽẀẁẂẃẄẅỲỳ№

Do not add objects or

text in the footer area CLOUD - REGULATORY IMPACT | Public | © Ericsson AB 2013 | 2013-09-10 |

Ericsson Cloud System

Overview: Concepts

Ericsson cloud System offering

Ericsson Cloud Execution Environment

Network & Data Center Infrastructure

Ericsson

Cloud

Manager

Virtualized Applications

The Ericsson Cloud System

is made up of three main parts;

Networking and Datacenter

Infrastructure, Cloud Execution

Environment, and Cloud

Manager.

All of these parts are required

to create a cloud platform, but

not all of the parts need to

supplied by Ericsson in order to

deploy any of our virtualized

applications.

This segmentation of the

Ericsson offering follows an

industry benchmarking making

it more generic for policy

implication analysis.

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Native System

Overview: Concepts

Virtualization I

Application

Hardware

Native

Application

Understanding Virtualization is key to

understanding the Cloud System.

In a native deployment the application

software has direct control over the

hardware on which it is running. This

means that dedicated hardware is

required to run each application.

In a virtualized platform like the Ericsson

Cloud System, each hardware

component is turned into a virtual

resource by a piece of software called

the Hypervisor.

The Virtualized applications now run on

virtual machines rather than on specific

hardware and are given resources as

required by the Hypervisor.

Cloud System

Cloud

Hardware

Virtualized

Application

Virtualization

Software

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Native System

1

Overview: Concepts

Virtualization II

Application

Hardware

Native

Application 1 With the Hypervisor in-between the

application and the hardware resources

the application software is now said to be

Decoupled from the hardware. This

means, for instance, that multiple

applications can share the same piece of

hardware.

It is up to the Hypervisor and the rest of

the Execution Environment to distribute

the hardware resources as efficiently as

possible to the applications that require

them. This dynamic allocation of

resources by the execution environment

is called Elasticity.

In the Ericsson Cloud System, the

Hypervisor is included in the Ericsson

Cloud Execution Environment. Cloud System

Cloud Hardware

Virtualized

Application

1

Virtualization Software

Virtualized

Application

2

Virtualized

Application

3

Native System

2

Application

Hardware

Native

Application 2

Native System

3

Application

Hardware

Native

Application 3

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Overview: Virtualization

REGULATORY IMPLICATIONS

Decoupling (D) per see should not

result in any new regulatory

implications or for new policy

interventions.

Decoupling and outsourcing results

in regulatory implications such as

conditions defining possibilities of

transferring statutory liabilities.

Localization, e.g. off-shoring of

outsourcing will result in regulatory

considerations.

LOCALIZATION

OUTSOURCING

D

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Overview: Outsourcing & Cross-border flows


Outsourcing:

Statutory Responsibilities

Enforcement

Localization:

Type of data processing:

- Commercial

- Public Institutions

- Law enforcement

National standards of privacy regulation

Extra territorial implications

Data Transfers

Trade barriers / Forced localization

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Overview: Deployment Scenarios

regulatory implications

Public cloud deployments raise

policy issues regarding intermediary

liability and immunities for

intermediaries which are

conditional for service providers

offering public clouds.

Conditions and immunities

contribute to the cost and risk

associated with such service

provisioning.

Network offerings underpinning

telecom private cloud solutions that

are subsequently a part of a

consumer offering might potentially

face issues regarding traffic

management and traffic

differentiation.

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Ericsson Cloud System

Overview: Applications & Services


Ericsson Cloud Execution Environment

Network & Data Center Infrastructure

Ericsson

Cloud

Manager

Virtualized Applications

Different types of user applications,

hosted in a cloud, may be used in a

specific context/sector and hence

this use becomes subjected to sector

specific regulation such as telecom,

media/content, e-commerce, health

etc. above and beyond consumer

protection law.

These “applications” will then add an

additional layer of regulatory

consideration that are not specific to

the implementation architecture e.g.

native or decoupled.

Sector specific regulation might have

additional regulatory implications not

on virtualization per see but indirectly if

virtualization is followed by outsourcing

and/ off-shoring localization.

Slide title

70 pt

CAPITALS

Slide subtitle

minimum 30 pt

REGULATORY CONSIDERATIONS CLOUD

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







WHY, WHAT and HOW to Regulate?

CLOUD REGULATORY Challenges

Global nature of connectivity/processing

Quantum jump in scale/scope of processing

Distributed nature of control SCALE/CONTROL

Law/Hierarchy

Architecture/Code/Design IMPLEMENTATION

How to Enforce

When to Enforce

Convergence / Services & Sectors

ENFORCEMENT

CONGRUENCE

Norms/Values

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Addressing Scale & Control Issues:

› Commercial Data Processing

› Public Institutions Data Processing

› Law Enforcement Data Processing

› National Security Data Processing

› Cyber Security

Devising Effective Regulatory Frameworks

REGULATORY Targeting

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Holistic Regulation

REGULATORY Convergence

Wire line

Voice & data TV & Media Internet

Wireless

Voice & data

Broadcast

Internet Apps

/ASP/ Cloud

Fixed

Mobile

Source: Heavy Reading, Telecom in TV Land, 20070710

APPLICATIONS & SERVICES

PL

AT

FO

RM

S

WHEN NECESSARY REGULATE SERVICES NOT PLATFORMS

PLATFORM & TECHNOLOGY NEUTRAL APPROACH

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Co-/Self-Regulation

› Privacy by design

› Accountable company

› Self Regulation with

substance

› Cooperation with agencies

and facilitated knowledge-

sharing

Command-Control

› Outcome oriented

› Clear roles and

responsibilities in the value

chain

› Risk-based approach

› Efficient tools managing

Cross-border flows

How to Implement

Implementation Strategy

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







INT

EN

DE

D

INFORMED WELL

ILL

ILL

ACCOUNTABLE

COMPANY

EVIL

COMPANY

UNINFORMED

COMPANY

DECEPTIVE

COMPANY PUNITIVE

DETERRENCE

PARTICIPATORY

COMPLIANCE

How to Enforce

Enforcement Strategy

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







When to Enforce

Enforcement Strategy

FOCUS ON

ENFORCEMENT

FOCUS ON

AVERSION

PREVENTION ACT HARM

PERSUASION

WARNING

CIVIL PENALTY/

ADMINISTRATIVE NOTICE

OPERATIONAL

INTERVENTION

CRIMINAL PENALTY

CONTROL OF COMPANY /

LIQUIDATION DETERRENCE

COMPLIANCE

Slide title

44 pt.


minimum 24 pt.

Bullets level 2-5

minimum 20 pt.







Convergence – Platform Equality

Information Management – Data Protection

Information Management – Cross Border Data Flows

Copyright - Enforcement

Network Regulation – Traffic Management

Related Regulatory Topics ERICSSON’S POLICY advise

ICT Policy for the Networked Society

Cloud regulatory impact

Technology

Transcript of Cloud regulatory impact