1. ISO - Cloud Computing Standards 1 Cloud Computing Standards ISO Addresses the Challenge Cloud Computing Standards ISO Addresses the Challenge www.oasis-open.org Mike Edwards Chair BSi UK SC38 committee IBM Hursley Lab, UK mike_edwards@uk.ibm.com

2. ISO - Cloud Computing Standards 2 Agenda Cloud Computing Standards What is ISO / IEC ISO JTC/1 Standards activities JTC/1 SC38 Reference Architecture

3. ISO - Cloud Computing Standards 3 Cloud Computing & Standards Why are standards needed for Cloud Computing? enable Interoperability & Portability avoid vendor lock-in provide assurance: security, privacy Cloud Computing Standards many existing standards can apply to cloud e.g. encryption / authentication some new or adapted standards are necessary deal with unique cloud usecases

4. ISO - Cloud Computing Standards 4 What is ISO/IEC? ISO / IEC International Standards Organization International Electrotechnical Commission with ITU-T, has formal legal status for creation/approval of international standards JTC/1 = technical committee for ICT examples of well-known standards ISO 27000 (Security) ISO 20000 (Service management)

5. ISO - Cloud Computing Standards 5 ISO/IEC & the Standards World ISO / IEC cooperates with many other standards bodies: OASIS, W3C, IETF, DMTF, OMG, OGF, SNIA... Standards developed elsewhere can be submitted to ISO for publication as ISO standards ("PAS" process) examples: OVF WS-I Basic Profile V 1.1

6. ISO - Cloud Computing Standards 6 ISO Cloud Standards activity JTC/1 SC38 "Distributed application platforms and services" SGCC Report Terminology Reference Architecture JTC/1 SC27 "IT Security techniques" Security JTC/1 SC7 "Software and systems engineering" Software asset management

7. ISO - Cloud Computing Standards 7 Wider Cloud Standards activity DMTF - OVF, CIM / CIMI SNIA - CDMI OASIS - Identity in the Cloud OGF - OCCI ITU-T Focus Group on Cloud Computing The Open Group - Reference Architecture IEEE - Interoperability & Portability Profiles ODCA

8. ISO - Cloud Computing Standards 8 Countries engaged in SC38 USA, Canada, China Korea, Japan, Singapore UK, France, Germany, Sweden Finland, Denmark, Brazil, Poland

9. ISO - Cloud Computing Standards 9 Cloud Computing Reference Architecture Governance Cloud Carrier Cloud Provider Cloud Service Management Operational Support Business Support Business Support Physical Resource Layer Service Creation Tools Cloud Consumer Cloud Broker Intermediation Aggregation Arbitrage Service Orchestration & Implementation Resource Abstraction Layer IaaS SaaS PaaS Service Layer Cloud Auditor Security Audit Privacy Impact Audit Performance Audit

10. ISO - Cloud Computing Standards 10 SC38 view Reference Architecture models the Cloud Computing space allows other specific standards to fit in to an overall picture e.g.: SNIA CDMI for storage OVF for machine images

11. ISO - Cloud Computing Standards 11 Summary Cloud Standards aim to remove barriers to adoption & increase ease of use ISO / IEC aims to provide appropriate Cloud standards ISO works with other standards bodies on specific areas