National Institute of Standards and Technology Information Technology Laboratory 1 USG Cloud Computing Technology Roadmap Highlights NIST Cloud Computing Forum and Workshop IV, November 2, 2011 Dawn Leaf, NIST Senior Executive for Cloud Computing NIST Mission: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life ©Robert Rathe

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Accelerate the federal government’s adoption of cloud computing* –Build a USG Cloud Computing Technology Roadmap which focuses on the highest priority USG cloud computing security, interoperability and portability requirements –Lead efforts to develop standards and guidelines in close consultation and collaboration with standards bodies, the private sector, and other stakeholders Revisiting the NIST Cloud Computing Program Goal briefed November 2010 * REF

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here NIST Cloud Computing Program (Phase 1) dual strategic & tactical objectives How to build a USG Cloud Computing Technology Roadmap 1. Define Target USG Cloud Computing Business Use Cases 2. Define Neutral Cloud Computing Reference Architecture & Taxonomy 3. Generate Cloud Computing Technology Roadmap – Translate Requirements & Identify Gaps priorities risks obstacles Expand CC Definition ref. architecture NIST CC efforts Standards Working Group, Standards Organization liaison, NIST CC Definition & Reference Architecture Submissions Standards Acceleration to Jumpstart the Adoption of Cloud Computing (SAJACC) – qualitative testing of specifications against interoperability, security, and portability requirements Guidance – Special Publications; technical advisor to Fed CIO Council (FedRAMP), Federal CC Standards & Technology Working Group Complex Computing Simulation & Modeling – Koala IaaS resource allocation algorithms Strategic Program Tactical Program Interagency Report: USG Cloud Computing Technology Roadmap list of Tactical Priorities & Deliverables Concurrent & Iterative 3-step process that drives tactical efforts

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here NIST Cloud Computing Program Timeline (phase 1) May 2010 Nov 2010 STRATEGICSTRATEGIC NIST CC Definition Tactical efforts Outreach & Fact finding with USG, Industry, SDOs Evaluate past models & lessons learned Define fresh approach to support secure & effective USG cloud computing adoption, prioritize interoperability, portability, & security requirements, collaborate, more quickly respond to operational needs Launch CC Strategic Program Initiate Stakeholder Meetings Collaboratively define working group scope & resources Develop Refined Plan March 2011 Execute CC Strategic program Continue Stakeholder meetings Integrate results into tactical priorities NIST CC Forum & Workshop I NIST CC Forum & Workshop II NIST CC Forum & Workshop III Oct 2011 NIST CC Forum & Workshop IV Complete 1 st draft Interagency Report Assess Results & Replan USG Cloud Computing Technology Roadmap USG Cloud Computing Technology Roadmap

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Revisiting the rationale -- Why a USG Cloud Computing Technology Roadmap, and why is it structured as it is ….? The technology roadmap initiative and document are intended to in parallel help us move forward strategically and tactically …. Strategic roadmap is basically a priority list – what do we need to get from where we are to where we want to be Mechanism to integrate and present analysis, findings, and useful technical work mechanism to focus discussion in order to more definitively achieve a common understanding between USG & private sector on technical steps to move forward Calibration point -- basis to assess & plan NIST Cloud Computing priorities

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here The USG Cloud Computing Technology Roadmap in final form will have 3 volumes…Volumes I & II are released as Draft Special Publication for public comment; Volume III is a working document …. all are available online Volume I, High-Priority Requirements to Further USG Agency Cloud Computing Adoption, frames the discussion and introduces the roadmap - STRATEGIC Volume II, Useful Information for Cloud Adopters, is a technical reference for those actively working on cloud computing initiatives – STRATEGIC & TACTICAL Third volume, Technical Considerations for USG Cloud Computing Deployment Decisions – TACTICAL explains how Volume II work can be applied initiated in parallel with but dependent on Volume II -- will be part of the SP All are publically available at

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Volume I - Highlights Overview - USG Cloud Computing Technology Roadmap initiative Core Elements: Prioritized strategic and tactical interoperability, portability, and security requirements that must be met for USG agencies to further cloud adoption; Standards, guidelines, and technology needed to satisfy these requirements; Recommended list of Priority Action Plans (PAPs) -- candidates for voluntary self-tasking by the stakeholder community. USG Cloud Computing Technology Roadmap requirements - high priorities to further USG Cloud Computing Technology Adoption: Requirement 1: International voluntary consensus based interoperability, portability and security standards (interoperability, portability, and security standards) Requirement 2: Solutions for high priority Security Requirements (security technology) Requirement 3: Technical specifications to enable development of consistent, high quality Service Level Agreements (interoperability, portability, and security standards and guidance) Requirement 4: Clearly and consistently categorized cloud services (interoperability and portability guidance and technology) Requirement 5: Frameworks to support seamless implementation of federated community cloud environments (interoperability and portability guidance and technology) Requirement 6: Technical security solutions which are de-coupled from organizational policy decisions (security guidance, standards and technology) Requirement 7: Defined unique government regulatory requirements, technology gaps, and solutions (interoperability, portability and security technology) Requirement 8: Collaborative parallel strategic “future cloud” development initiatives (interoperability, portability, and security technology) Requirement 9: Defined and implemented reliability design goals (interoperability, portability, and security technology) Requirement 10: Defined and implemented cloud service metrics (interoperability and portability standards)

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Volume II - Highlights Summary of USG target business use case templates & initial set Cloud Computing Standards Roadmap SP July 2011 standards & gap analysis SAJACC technical use case summary NIST Cloud Standards Portal Use Cases Validated Specifications Reference Implementations Standards Development Organizations standards Existing Standards Working Groups information Community Outreach spec 1 spec 2 … Specifications Use Cases Case 1 Case 2 … Validation Exercises Spec 1 Spec 2 … Spec n Test 1 Test 2 … Test n High Priority Security Requirements - challenges, requirements overview, risk mitigation measures Other related work - Reliability Research in Cloud-based Complex Systems Koala – SLA taxonomy, Useful Information for Cloud Adopters Summary of the work completed November 2010 through September 2011 in projects & working groups Analysis supports high priority requirements introduced in Volume I insight into rationale for list of candidate Priority Action Plans (PAPs) References to detailed publications & external work

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Working Document to be developed thru collaborative process (Volume 3 of SP ) Technical Considerations for USG Cloud Computing Deployment Decisions builds on the first two volumes released as SPs concurrently with this working paper FOR: technical teams responsible Cloud Computing projects GOAL: inform in terms of questions and decision factors in the context of representative Cloud Computing use cases DESCRIBES HOW: to use Volume II work completed 2010 – 2011 in the context of Federal Cloud Computing Strategy Decision Framework for Cloud Adoption

National Institute of Standards and Technology Information Technology Laboratory insert image of roadmap volume I cover sheet here Intent is to lay the groundwork to more directly tackle a subset of cloud computing technology scope to accelerate USG cloud adoption The “roadmap” is intended to foster a substantive discussion among cloud computing stakeholders in government and the private sector Many requirements identified in the roadmap are intuitive – roadmap significance is the November 2010–October 2011 time frame technical work to identify a definitive priority list and assess the extent to which they are satisfied. Ideally, responses to the roadmap will refine the requirements and identify relevant work which is under way 30 Day comment period for SP In addition, public working groups will resume for all work related to the roadmap -- Back to Framing the Discussion -- underlying principles and assumptions Written comments on both volumes of the SP may be sent to: Robert Bohn, National Institute of Standards and Technology, 100 Bureau Dr., Stop 2000, Gaithersburg, MD Electronic comments may be sent to:

National Institute of Standards and Technology Information Technology Laboratory Break Please return at 11:30 for The Case for USG Cloud Computing Priorities Optional lunchtime (1:30) USG Cloud Computing Technology Roadmap OPEN discussion in the portrait room Please submit written questions & comments in advance to the registration desk to make our time most productivePlease submit written questions & comments in advance to the registration desk to make our time most productive Please feel free to bring your lunchPlease feel free to bring your lunch Please Note: Real-time Collaboration in Hall of Flags, breaks & as part of the main program this afternoon 11