Click to edit Master title style

Cloud Computing Initiative

Vision and Strategy Document
(DRAFT)

February 2010

1
 Federal Cloud
Click to edit Computing
Master title style
Vision and Mission
Cloud Computing Vision Statement
Establish secure, easy to use, rapidly provisioned IT services for
the Federal Government, including:
• Agile and simple acquisition and certification processes;
• Elastic, usage-based delivery of pooled computing resources;
• Portable, reusable and interoperable business-driven tools;
• Browser-based ubiquitous internet access to services; and
• Always on and available, utility-like solutions.

Cloud Computing Mission Statement

Drive the government-wide adoption of cost effective, green and
sustainable Federal cloud computing solutions.

This information is draft and has not been published, please do not disseminate 2
 Cloud
Click toCapabilities
edit Master Must be Tailored to
title style
Government’s Unique Needs

Federal Government
Considerations for Cloud Computing
Cloud Computing
Security & Delivery & Interoperability
Services Data Privacy Operations & Integration

Software as a Service (SaaS) Offer different Enable Develop

levels of adoption of interoperability
•• Citizen
Citizen Engagement
Engagement (Wikis,
(Wikis, Blogs,
Blogs, Data.gov)
Data.gov) security and Cloud standards in
•• Government
Government Productivity
Productivity (Cloud
(Cloud based
based tools)
tools)
••
data privacy Computing conjunction
Business
Business Enablement (Salesforce.com)
•• Enterprise
Enterprise Applications
Applications (Core
(Core Mission
Mission &
& Business
Business Svcs)
Svcs)
based on the services in with the
application and different Cloud industry to
Platform as a Service (PaaS) nature of the models provide
services including interoperability
provided. Public, Private, at the data
•• Database
Database and
and Database
Database Management
Management Systems
Systems
•• Developer
Hybrid and infrastructure,
Developer // Testing
Testing Tools
Tools
•• Virtual
Virtual Environments
Environments Potential Community platform and
standardize models. application
Low, Med and levels.
Infrastructure as a Service (IaaS) High
•• Computing
categories for
Computing
•• Storage
Storage Simplicity.
•• Application
Application hosting
hosting

3
 Click to edit
The NIST MasterOffers
Definition title style
Multiple Delivery
Models for Cloud Computing
Outsourced Cloud Sourcing Models Government

High Private Cloud Commercially Hosted: Private Government Cloud :

Publically available Cloud Computing The cloud infrastructure is operated solely for an
services offered through commercial sources organization. It may be managed by the
that are dedicated and separate from the organization or a third party and may exist on
Trust (Security and Data Privacy)

Public both physically and logically and must premise or off premise.
to remain within the U.S. borders to support
heighted data security and privacy
requirements. Access to these services are
provided through a dedicated Government Private Government
Intranet and is not accessible from the Public
Commercially Dedicated Private
Internet.
Hosted Intranet Government
Cloud Cloud

Community Cloud: The cloud infrastructure is

Public Cloud:
The cloud infrastructure is
made available to the general
public or a large industry group
and is owned by an
organization selling cloud
services.
Low
shared by several organizations and supports
a specific community that has shared
concerns (e.g., mission, security
requirements, policy, and compliance
considerations). It may be managed by the
Community organizations or a third party and may exist
Cloud on premise or off premise.
Public Hybrid Cloud: The cloud infrastructure is a
Public Internet composition of two or more clouds (private,
Cloud
community, or public) that remain unique
entities but are bound together by
standardized or proprietary technology that
Hybrid Government Cloud enables data and application portability (e.g.,
cloud bursting).

4
 Federal Cloud
Click to edit Computing
Master title style
Goals and Objectives
 Establish and Manage Governance
 Manage Cloud Computing Executive Steering Committee
and Cloud Computing Agency Advisory Council
 Establish and Manage Communities of Practice and
Working Groups
 Coordinate Policy and Strategy Development and
Participation in other Governance bodies related to Cloud
Computing activities (e.g. Security, Records Management,
eDiscovery)
 Establish a Federal C&A Process
 Provide Procurement Leadership
 Develop Acquisition Vehicles to Ease Agency Procurement
of Cloud Computing Solutions
 Coordinate across the Federal Acquisition community to
ensure adoption and implementation of cloud-related
procurement policies and processes
 Facilitate Adoption of the Cloud Computing Storefront
 Drive Cloud Technology Innovation
 Identify Common Cloud Services and Foster Standards
Development and Security Policies
 Develop Architectures that Allow Agencies to More
Effectively Implement and Leverage Cloud Computing
Services
 Establish, Manage and Coordinate Cloud Computing
Developer Communities and Application Libraries
 Enable the Reuse, Modularity and Interoperability of Cloud
Computing Services
This information is draft and has not been published, please do not disseminate
 Enable Implementation and Adoption
 Assist and Guide Agencies to Implement and Roll out Cloud Solutions (e.g.
Service Provisioning)
 Facilitate Identification of Agency Partners for Pilot Activities
 Develop Methodologies to Effectively Assess and Implement Services
 Develop and Disseminate Cloud Services Operating and Business Models
 Enable Sustainable & Cost-Effective Computing
(Green IT, TCO)
 Develop and Manage Business Case Templates
 Identify Core Evaluative Criteria
 Identify Cloud Computing Performance Metrics (Enterprise and Technical)
 Develop Case Studies, Best Practices/Lessons Learned to Specifically
Demonstrate Support of Sustainability and Cost Effective Computing
 Operate as a Service Provider
 Identify and Offer Government Wide Services (e-mail, instant messaging,
Web 2.0 tools, etc)
 Assist Agencies in Determining Their Role in Developing/Hosting Services
 Facilitate Common Interfaces to Integrate Existing Federal Cloud service
environments
 Conduct Outreach Activities
 Develop the Cloud Services Communications Plan
 Design and Implement a Central Information Portal for Federal Cloud
Computing
 Develop and Manage Content for Communications
 Manage Cloud-related Wikis, Blogs, Portal, and other collaborative media
 Develop and present Training
5
 Federal Cloud
Click to edit Computing
Master title style
Goals and Primary Objectives and Initiatives
Goal Area Primary Objective Primary Initiative

Establish Security Initiative

Create Federal Establish and Manage Establish a Security Working
and Implement and Manage a
Governance Group
policies on security, Federal C&A Process

Lead
standards, and Identify Common Cloud
governance Drive Cloud Technology Services & Foster Standards Develop Requirements for
Innovation Development & Security Portability Standards
Policies

Develop Acquisition Vehicles Develop Acquisition

Provide Procurement
to Ease Agency Procurement Roadmap
Leadership
of Cloud Computing Solutions
Provide cloud
Enable

computing Assist & Guide Agencies to

Identify and Facilitate Cloud
Facilitate Implementation Implement Cloud Solutions
solutions in (e.g. Service Provisioning)
Computing Agency Pilots
support of Federal
agency missions Operate as a Solutions Develop the Cloud Services
Provider Develop Services Roadmap
Business Model

Design and Implement a

Conduct Outreach Establish Communications
Central Information Portal for
Activities Initiative and Develop Portal
Provide strategic Federal Cloud Computing
Support

roadmaps, best
Identify Cloud Computing Establish Performance
practices, and Performance Metrics Metrics Initiative
acquisition Enable Sustainable &
Cost-Effective Computing
guidance (Green IT, TCO)
Define Data Center Develop Data Center Analysis
Optimization Strategy and Agency Goals

This information is draft and has not been published, please do not disseminate 6
 Federal
Click to Cloud Computing
edit Master title style Transition
Plan
Workstream 2010 2011 …
Manage ESC, CCAC and Working Groups (ongoing)

Program Management/ Finalize Communications Plan Conduct Outreach Activities (Summits, Online Discussions, Training, etc.)
Governance/ Develop Portal Coordinate with Working Groups and Agencies to Collect Content for Portal (ongoing)
Communications Coordinate Policy and Strategy Development (eDiscovery, Records Management, Privacy, etc.)
Identify Integration and Coordination Points between Working Groups and other Government Fora (ongoing)

Develop Standards Roadmap Work with Industry Standards Bodies (ongoing)

Validate Standards Use Cases
Standards
Identify Security Standards Requirements Work with Agencies on Enabling Standards Adoption (ongoing)
Identify Interoperability and Portability Standards Requirements Identify Manageability Standards Requirements

Stand Up Federal C&A Process Work with Agencies and Industry to Facilitate Use of the Federal C&A (ongoing)
Fully Inventory Security Challenges (e.g. identify FISMA gaps)
Security
Identify Pilots or Other Projects that can Test Security Issues Implement and Manage Pilots
Identify Security Policy Issues, Coordinate Feedback and Determine Recommendations

Develop Acquisition Roadmap Coordinate Across the Federal Acquisition Community to Implement Procurement Policies

Acquisition/ Develop Services Roadmap Establish, Manage and Coordinate Developer Communities and Application Libraries
Procurement/ Award IaaS Release PaaS RFI Develop Guidelines for Leveraging Contract Vehicles Develop Draft SOWs
Services Facilitate Adoption of Apps.Gov
Maintenance of Apps.Gov (ongoing)

Identify Technology Center Initiatives and Agency Pilots Implement, Manage Pilots and Capture Best Practices and Lessons Learned
Adoption and Develop Cloud Computing Maturity Model Develop Cloud Computing Implementation Guide for Agencies
Implementation
Establish Performance Metrics Initiative Identify Cloud Computing Performance Metrics

(Sustainable and Cost-
Effective Computing and Data
Center Consolidation and
Optimization)
Develop Cloud Segment Architectures Assist Agencies in Implementing/Providing Cloud Solutions and Services
Develop Analytic Framework Develop Data Center Recommendations for Agencies Develop and Manage Templates
Conduct Data Center Analysis Develop Data Center Assessment Guide and Maturity Model
Identify Data Center Pilots and Develop Tools Assist Agencies in Data Center Optimization Strategies

This plan is currently under consideration and should be considered Notional/Draft. 77

 Cloud
Click toComputing Initiative:
edit Master title style
Governance Model
The Cloud Computing PMO is the nucleus of Cloud Computing Initiative for the Federal Government, setting
direction, establishing guidelines and defining the future vision and architecture

Gov
Agencies
• Cloud Computing Vision /
• Data Call
Mission
• Requirements
• Information Portal
• Interests &
• Market Research / Use
Feedback
Cases
• Policies and Guidelines
• Enterprise Architecture
• Apps.gov / Procurement
• RFI/RFPs Support
• Definitions • Information Dissemination
• Security
CC • Standards
• Virtual Online Summits
Requirements PMO Requirements
• Standards • Security Processes
Requirements • Procurement
• SLAs Approaches
• Best Practices
• Gov-wide
Communications
Vendors CCESC/ Security
CCAC
Cloud
Computing
• Compliant Services and • Direction and Standards Working
Offerings Guidance Groups
• Input to Standards • Facilitation
• Collaboration on • Schedule and
Ops
Developing Standards & Coordination Comm Excellence
Best Practices

8
 Working
Click Groups
to edit Provide
Master Support Across All of
title style
the Goal Areas and are Driven by the CCPMO
Goal Area Cloud Computing Program Management Office
 Security Working Group
Establish and Manage  Identify Functional Leader and Membership
Governance  Develop Objectives for Cloud Computing Advisory Council Security Working Group (e.g.
Establish a Federal C&A Process)
 Define Intended Deliverables
Each Working Group will
Provide Procurement
 Develop Security Roadmap
ultimately establish its
Leadership  Standards Working Group own objectives and plan
 Identify Functional Leader and Membership of action – items
 Develop Objectives for Group referenced here are just a
Enable Adoption and  Define Intended Deliverables
sample
Implementation  Develop Standards Roadmap
 Operational Excellence Working Group
 Identify Functional Leader and Membership
Operate as a Service  Develop Objectives for Group
Provider  Define Intended Deliverables
 Develop Operational Excellence Roadmap
 Assist and Guide Agencies to Implement and Roll out Cloud Solutions
 Develop Case Studies, Best Practices/Lessons Learned
Conduct Outreach Activities  Facilitate Identification of Agency Partners for Pilot Activities
 Develop Methodologies to Effectively Assess and Implement Services
 Develop and Disseminate Operating Models and Business Processes

Drive Cloud Technology

 Communications Working Group
Innovation  Identify Functional Leader and Membership
 Develop Objectives for Group
 Define Intended Deliverables
Enable Sustainable & Cost-  Develop the Cloud Services Communications Plan
Effective Computing (Green  Design and Implement a Central Information Portal for Federal Cloud Computing
IT, TCO)  Develop and Manage Content for Communications
 Develop and Conduct Training

9
Government Cloud title
Click to edit Master Services
style Model
Online User Interface

10
 Federal Cloud
Click to edit Computing
Master title style
Cloud Program Services Model
Components Description
To deliver the Online User
Customizable • One stop shop/ single view for Users to manage
Interface, the government 1 User Page interactions with Cloud Services
must address the following
Application • Applications and content made available to
Service Components… 2 Library Users through a simple GUI. These applications
/ content can be downloaded easily from the
Library.

Online User Storage • Online storage for Users to maintain and

3
manage individual User files, data and objects
1 2
Collaboration • Widgets that allow Users to collaborate and
Customizable Application 4
generate content. These widgets may include
User Page Library
Wikis, Blogs, and IM

7 Access / • Network connectivity and devices to access

Provisioning / Online User
3 5
Cloud Connectivity Cloud services
Admin Tools Storage
Services Cloud Standards • Cloud standards allowing the integration and
6
/ Interoperability interoperability of services from multiple Clouds
Cloud Standards /
Collaboration
Interoperability

6
Access / 4 Provisioning / Admin • Provisioning and administrative tools to provide
Connectivity 7 Tools control of User profiles, access technical
support, and manage privilege, authorization to
5 applications and content
Security / 8
Data Privacy
8 Security / • Applying security framework and data privacy
Data Privacy standards for Federal Cloud Computing

11
 Government Cloud title
Click to edit Master Services
style Model
Cloud Relationship View
Government
Private Clouds
Commercially Hosted
Behind the scenes are the core Government Private Clouds
Private Clouds DMZ
cloud services that support the
DMZ
daily functions for Government
employees Government
Hybrid Clouds
Single Security Provisioning Procurement Reporting
Sign on C&A Integration Financials Management

Public
Cloud Vendors

Public
Internet Cloud Vendors

12
 Federal Cloud
Click to edit Computing
Master title style
Draft Services Framework
User Tools

Software as a Service (SaaS) / Applications Application User/ Admin Reporting &

Integration Portal Analytics
Citizen Engagement Gov Productivity Gov Enterprise Apps
Business Svcs
Wikis / Blogs Email / IM Customer /
Apps
Account
Core Mission
Social Networking Virtual Desktop Mgmt Analytic
Apps API’s
Tools
Agency Website Legacy Apps
Office Automation User Profile
Hosting (Mainframes)
Mgmt
Cloud Services

Workflow Data Mgmt

Engine
Platform as a
Service (PaaS) Database
Testing Developer Order Mgmt Reporting
Tools Tools EAI

Directory Knowledge
DBMS Trouble
Services Mobile Mgmt
Device Mgmt
Integration
Billing /
Infrastructure as a Data Invoice
Virtual
Service (IaaS) Storage
Machines
Migration Tracking
Tools
Product
CDN Web Servers Server Hosting
ETL Catalog

Service Mgmt & Service Inventory CoS/QoS Utilization App Perf DR / Operations
Provisioning SLA Mgmt
Provisioning Mgmt Mgmt Monitoring Monitoring Backup Mgmt
Core Foundational
Capabilities

Security &
Data/Network Certification & Authentication & Auditing &
Data Privacy Security
Data Privacy
Compliance Authorization Accounting

Data Center Routers / Internet Hosting

Facilities LAN/WAN
Firewalls Access Centers

13