European Cloud Computing Strategy

Dr Ken Ducatel DG CONNECT

Drivers: Economic 3.8m

1.3m

IDC SMART 2011/0045 http://cordis.europa.eu/fp7/ict/ssai/docs/study45-d2-interim-report.pdf

2015

2020

Jobs

2020 €88bn

€250bn EU

GDP

0%

5%

10%

15%

20%

25%

30%

1% to 4%

5% to 9%

10% to 19%

20% to 29%

30% to 49%

50% or more

We have seen (or expect

to see) a cost

increase

Too early to

tell

Don't know

Cost Savings

Almost all users see cost savings peaking at 10-20%

26. 09. 14

3

But.... Need for Trust, Regulatory Certainty and Openness

26. 09. 14 4

Legal jurisdiction

Security and data protection

Trust Data Acces and Portability

Inhibitors: Political

•  Government Surveillance and Net Neutrality

Inhibitors: Legal

•  Data Sovereignty •  Patriot Act •  FISAA

•  What is the impact of extra-territoriality? Should other Governments have access to EU citizens' data?

Goals: Digital Single Market

•  "If we’re going to get these billions of euro of growth in the economy, it’s no good if people are doing things at sub-critical scale.

•  National cloud infrastructures built at national level — building cloud infrastructures that are meeting specific local requirements of that particular country — don’t make sense.

•  This is a global business, we need to play a global game."

Cloud computing services: public sector drivers and draggers

Drivers Draggers

Security worries Contracts

Budgeting & costs

Scalability Technology

Standards

Audit

Legal compliance

Reversability

Data location

New demands: Mobility, BYOD, etc

Cost caps

Capital caps

Interoperability

Legacy apps, etc

Public Cloud

Hosted Private Cloud

IT for Private Cloud

Bill. €10.2

Bill. €4.02

Bill. €4.3

Cloud Models

30%

53%

20%

% of General IT spending

Public Cloud

Hosted Private Cloud

IT for Private Cloud

5.6%

2.2%

2.4%

IDC Western European Cloud Forecast 2014

Cutting through the jungle of technical standards

The Cloud Select Industry Group on Service Level Agreements

The Cloud Select Industry Group on Certification Schemes

The Cloud Select Industry Group on Code of Conduct

ETSI: Cloud Standards Coordination

The European Cloud Partnership

Cloud strategy's key actions

Groups working on implementing the strategy

Development of model 'safe and fair' contract terms and conditions A European Cloud Partnership to drive innovation and growth from the public sector.

The Cloud Computing Contract Group

The European Commission's strategy 'Unleashing the potential of cloud computing in Europe' Adopted on 27 September 2012, it is designed to speed up and increase the use of cloud computing across the economy

The Cloud Computing Strategy

Launched on 4-5/12/2012

Launched on 21/02/2013

Launched on 10/04/2013

Launched on 21/02/2013

Launched on 19/11/2013

Launched on 19/11/2012

Steering Board

Cloud for Europe To be launched In 11/ 2013

Cloud Strategy – Where are we?

1) Cloud Standards Coordination – ETSI (Ver 1 Dec 2013, Ver 2 early 2015)

2) Security Certification Schemes – Cloud SIG ENISA - list (Feb 2013) and ENISA - metaframework (Mid 2014)

3) Service Level Agreements – Cloud SIG Guidelines (June 2014)

4) Code of Conduct for Cloud SPs - Cloud SIG To Article 29 Working Party (Mar 2014) Operational (end of 2014)

ETSI CSC - Main conclusions

12  

Enough  Standards  to  start  with  

Foster  collabora7on  to  ensure  no  fragmenta7on  happens    

NO  Jungle  of  Standards  

Despite  new  standards  coming,  

some  gaps  iden7fied    

Cloud Standards

http://www.etsi.org/images/files/Events/2013/2013_CSC_Delivery_WS/CSC-Final_report-013-CSC_Final_report_v1_0_PDF_format-.PDF

26. 09. 14 13

Cloud SLA Standardisation Guidelines

26. 09. 14 14

The Cloud SLA Standardisation Guidelines will help professional cloud users to ensure essential elements are included in plain language in contracts they make with cloud providers. Relevant items include:

•  The availability and reliability of the cloud service, •  The quality of support services they will receive from their

cloud provider •  Security levels •  How to better manage the data they keep in the cloud.

Input to ISO Cloud Computing Working Group

26. 09. 14 15

•  This initiative will have deeper impact if standardisation of SLAs is done at international level, e.g. through international standards, such as ISO/IEC 19086.

•  To this end, the C-SIG on SLAs is also working with the ISO Cloud Computing Working Group, to present a European position on SLA Standardisation (ISO meeting in October 2014)

•  The Cloud SLA Standardisation Guidelines will thus feed into ISO's effort to establish international standards on SLAs for cloud computing.

Code of Conduct on DP: Background

14 Oct 2013 CSIG Plenary

•  Directive 95/46/EC art 27 encourages adoption of codes of conduct and their endorsement by art 29 Working Party

•  EC Cloud Computing Strategy of 29-09-2012 “Work with industry to agree a code of conduct for cloud computing providers to support a uniform application of data protection rules which may be submitted to the Article 29 Working Party for endorsement in order to ensure legal certainty and coherence between the code of conduct and EU law.”

Data Protection Code of Conduct

14 Oct 2013 CSIG Plenary

•  Code of Conduct Working Group 1st meeting 10 April 2013 Under DG Connect’s Cloud Select Industry Group Continuous drafting until end of August

•  Work progress •  Second version of the Code of conduct was submitted to the

Article of 29 Working Party ("29WP"). •  Comments from the WP29 TS received in May 2014 •  Revised version of the Code and submission to the 29 WP

planned for end of August 2014 •  Aim for endorsement before end of 2014

26. 09. 14 18

•  Privacy and security are common barriers –addressed but stressed at different levels

•  Other: •  Regulatory issues (e.g. requirements for sharing data

between administration in Italy - rigidity in EU procurement law (G-cloud))

•  Technical issues (e.g. lack of maturity of technologies) •  Financial issues (e.g. assessing real costs of cloud

deployment) •  Adapting SLAs to cloud and public sector

•  Changes in process and ways of working are, if not a barrier, a main challenge in implementing cloud initiative in the public sector:

Cloud requires adjustment in ICT management processes, automation of tasks and changes in skills requirements for staff, pulling resources together between administrations used to manage their own bespoke ICT solutions, etc.

Public sector & policy barriers

"European Cloud Partnership"

•  The European Cloud Partnership Steering Board was set up as an advisory body to the Commission. Their aim is to bring together the public and private sector to advance the development of the cloud computing market in Europe.

•  In March 2014 they published their set of ideas, called 'Trusted Cloud Europe'.

•  https://ec.europa.eu/digital-agenda/en/european-cloud-partnership