European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes –...
Transcript of European Cloud Computing Strategy - cpeig.gal · • Cloud-CERT - list of certification schemes –...
European Cloud Computing Strategy
Jorge GASOS DG Connect, European Commission [email protected]
Key actions and state of play
Cloud services: market forecast § Supply side: new business
opportunities for telecom operators, cloud services providers and system integrators
§ Demand side: increased productivity, enhanced competitiveness, faster deployment of advanced IT services, especially for start-ups and SMEs
§ Many potential users still associate cloud computing with increased risks, such as: privacy, security, continuity of services, legal jurisdiction, etc.
Impact on providers and users
3
Policy context: Cloud Computing Strategy • 27 September 2012: COM on Unleashing the Potential of
Cloud Computing in Europe. Accompanying Staff Working Document
• The strategy is designed to stimulate the uptake of cloud computing across the economy
• Three key actions: • Mapping cloud relevant standards • Fair and safe contracts and SLAs • European Cloud Partnership
Progress
4
• Key action 1: • Standards mapping by ETSI
– Cloud Standards Coordination Conference Brussels - December 2013 • Cloud-CERT - list of certification schemes
– ENISA list (February 2014) and Meta-framework Mid-2014 • Key action 2:
• Cloud Service Level Agreements – Guidelines document Mid 2014
• Code of conduct (data protection) – Draft to Art 29 WP February 2014 – Aim endorsement during this Commission
• Cloud Contract Group – First results Mid 2014
• Key action 3 • Steering Board
– Trusted Cloud Europe Visions Document – March 2014 • Cloud 4 Europe project
– Official launch 14 November 2013 – Pre-notice April, call for tender early summer 2014
ETSI – CSC Structure and Timeline
ETSI @ CSC Workshop – 10/12/12013
• Launched in December 2012 • Workshop in Cannes, co-organized by EC, 200+ participants • Definition of work structure: 3 TGs, a coordination group (‘reference’)
• TG1 for definition of Roles and TG2 for collection of Use Cases • TG3 in charge of Use Case Analysis and Production of the Report
ETSI Support: Laurent Vreck
Key Action 1-1
15/07/14 6
SLAs: Creating A Common Vocabulary of Understanding
Purchaser’s Dilemma SIG SLA Support
“Cloud Contracts are not comparable and use different definitions”
Template SLAs and Terms and Conditions
“I don’t know which Cloud Delivery Options are right for my specific need”
Cloud Decision Flowchart
“I don’t know if I have considered the most important aspects for this contract”
Cloud Contract Checklist
Key action 2-1
Fair Contract Terms and Conditions
• Service Level Agreements (Cloud Select Industry Group)
• data preservation after termination of the contract,
• data disclosure and integrity,
• data location and transfer,
• ownership of the data,
• direct and indirect liability change of service by cloud providers and subcontracting
Code of Conduct on DP: Background
• Directive 95/46/EC art 27 encourages adoption of codes of conduct and their endorsement by art 29 Working Party
• EC Cloud Computing Strategy of 29-09-2012 “Work with industry to agree a code of conduct for cloud computing providers to support a uniform application of data protection rules which may be submitted to the Article 29 Working Party for endorsement in order to ensure legal certainty and coherence between the code of conduct and EU law.”
Key action 2-2
PCP - PPI
• PCP to steer the development of solutions to public sector needs /validating alternative solution approaches from various vendors
• PPI to act as launching customer / early adopter / first buyer of innovative commercial end-solutions newly arriving on the market
Pre-Commercial Procurement Public Procurement of Innovative solutions
Supplier B
Supplier C
Supplier D
Phase 1 Solution design
Phase 2 Prototype
development
Phase 3 Original development
of limited volume of first test products /
services Supplier A
Supplier B
Supplier C
Supplier D
Supplier B
Phase 0 Curiosity
Driven Research
R&D / Pre-commercial Procurement (PCP)
Phase 4 Deployment of commercial
end-products Diffusion of newly developed
products / services
Supplier D
Public Procurement of Innovative Solutions (PPI)
Supplier(s) A,B,C,D and/or X
multiple sourcing
11
ICT 8 - 2015
Pre-commercial procurement for public sector cloud computing services (PCP) • common requirements and terms of reference for
future procurement of cloud computing services
9 M€; large projects; PCP
Public procurement of innovative cloud computing solutions (PPI) • organizing joint procurement
of innovative cloud services by public authorities
13 M€; large projects; PPI
12
ICT 8 - 2015
Building on work undertaken by the project C4E: www.cloudforeurope.eu
European Cloud Partnership Steering Board: Trusted Cloud Europe Report Consultation: March - May
Roadmap
Priorities
• Agreement on harmonised EU data protection
• Safer more consistent contracts and means to resolve disputes
• Moving from formal to functional requirements for data location
• Encourage Cloud-Active procurement policies
§ Continuing core research in cloud computing
§ Cloud as an enabler of new applications (Big Data, IoT)
§ What is beyond Cloud Computing?
§ Software a key driver for productivity and growth
§ Open source development and innovation
Research and Innovation
§ Cloud supporting industrial / public sector innovation
§ Cloud as an enabler for SMEs / startups
17
Further Information
Horizon 2020 www.ec.europa.eu/research/horizon2020
Digital Agenda – Cloud Computing https://ec.europa.eu/digital-agenda/en/telecoms-and-internet/cloud-computing
Join us in this exciting journey