1. NIST Information Technology Laboratory Cloud Computing Program NIST Cloud Computing Program Current Activities Robert Bohn OASIS – International Cloud Symposium 2012 Digital Government Panel October 10, 2012

2. NIST Information Technology Laboratory Cloud Computing Program Outline RA (v. 2.0?) SLA Guidance Security RA 2

3. NIST Information Technology Laboratory Cloud Computing Program The NIST Cloud Computing Reference Architecture 3

4. NIST Information Technology Laboratory Cloud Computing Program Draft NIST CC Reference Architecture Cloud Consumer Cloud Provider Cloud Service Management Cloud Carrier Cloud Auditor Cloud Consumer Provisioning/ Configuration Provisioning/ Configuration Portability/ Interoperability Portability/ Interoperability Security Audit Security Audit Privacy Impact Audit Performance Audit Business Support Business Support Physical Resource Layer Hardware Facility Resource Abstraction and Control Layer Service Layer IaaS SaaS PaaS Cloud Orchestration Cross Cutting Concerns: Security, Privacy, etc Cloud Broker Service Intermediation Service Aggregation Service Arbitrage 4

5. NIST Information Technology Laboratory Cloud Computing Program Mind Map of a Master Service Agreement

6. NIST Information Technology Laboratory Cloud Computing Program Contents of SLA Business Level Objectives Roles & Responsibilities Requirements Operational Policies Continuity Limitations Financial Glossary of Terms Service Level Objectives Resources Performance Indicators Service Deployment Service Management Description Security Privacy

7. NIST Information Technology Laboratory Cloud Computing Program Cloud Business Requirements

8. NIST Information Technology Laboratory Cloud Computing Program Performance Indicators

9. NIST Information Technology Laboratory Cloud Computing Program Physical Resource Layer Hardware Facility Resource Abstraction and Control Layer Service Layer IaaS SaaS PaaS Software as a Service Platform as a Service Infrastructure as a Service Cloud Provider IT Infrastructure/ Operation Application Development Biz Process/ Operations App/Svc Usage Scenarios App/Svc Usage Scenarios App/Svc Usage Scenarios App/Svc Usage Scenarios Develop, Test, Deploy and Manage Usage Scenarios Develop, Test, Deploy and Manage Usage Scenarios Create/Install, Manage, Monitor Usage Scenarios Create/Install, Manage, Monitor Usage Scenarios NIST Security Reference Architecture 9

10. NIST Information Technology Laboratory Cloud Computing Program 10 NIST Security Reference Architecture – formal model 10