1. National Institute of Standards and Technology Information Technology Laboratory 1 USG Cloud Computing Technology Roadmap Next Steps NIST Mission: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life ©Robert Rathe NIST Cloud Computing Forum and Workshop IV, November 3, 2011 Dawn Leaf, NIST Senior Executive for Cloud Computing

2. National Institute of Standards and Technology Information Technology Laboratory 2 The NIST Cloud Computing Program Goal Stays the same…………. Accelerate the federal government’s adoption of cloud computing* –Build a USG Cloud Computing Technology Roadmap which focuses on the highest priority USG cloud computing security, interoperability and portability requirements –Lead efforts to develop standards and guidelines in close consultation and collaboration with standards bodies, the private sector, and other stakeholders

3. National Institute of Standards and Technology Information Technology Laboratory 3 NIST Cloud Computing efforts Public & working groups, Standards Organization liaison (Definition & Reference Architecture submission) Standards Acceleration to Jumpstart the Adoption of Cloud Computing (SAJACC) – qualitative testing of specifications against interoperability, security, and portability requirements Guidance – Special Publications; technical advisor to Fed CIO Council (FedRAMP), Federal CC Standards & Technology Working Group Complex Computing Simulation & Modeling – Koala How to build a USG Cloud Computing Technology Roadmap 1. Define Target USG Cloud Computing Business Use Cases 2. REFINE & APPLY Neutral CC Reference Architecture & Taxonomy 3. UPDATE Cloud Computing Technology Roadmap – Translate Requirements & Identify Gaps priorities risks obstacles Vendors map services Strategic Program (continue phase 1 activities and…) Tactical Program USG Cloud Computing Technology Roadmap USG Cloud Computing Technology Roadmap... leverage Priority Action Plans (PAPs) selected for self-tasking by Cloud Stakeholder Community Assess & Track: USG CC High Priority Requirements met by Priority Action Plans (self-tasked by NIST and other CC stakeholders) Rqmt 1: International consensus interoperability, security, portability standards Rqmt 2: Solutions for High Priority Security requirements Rqmt 3: Technical Specifications to enable high quality SLAs ……. Rqmt 10: Defined and Implemented cloud service metrics Integrate results into tactical priorities Measure Results The Phase 1 Strategic & Tactical activities continue…. Now leveraging work completed in Phase 1

4. National Institute of Standards and Technology Information Technology Laboratory 4 4 NIST COMPUTING PROGRAM TIMELINE (PHASE 2) (USG CLOUD COMPUTING TECHNOLOGY ROADMAP INITIATIVE CONTINUES….) Nov 2011 March 2012 STRATEGICSTRATEGIC NIST Cloud Computing Special Pubs Guidelines on Security and Privacy …… 800-144 Definition of Cloud Computing …………..800-145 CC Synopsis & Recommendations……..800-146 CC Standards Roadmap …………………500-291 CC Reference Architecture……………...500-292 USG CC Technology Roadmap Draft.... 500-293 Tactical efforts Public & Federal Standards & Technology working groups Initiate NIST CC Program Phase II Integrate & track USG Technology Roadmap Priority Action Plans (PAPs) with external stakeholders Integrate results into tactical priorities Measure Results NIST CC Forum & Workshop IV NIST CC Forum & Workshop V Nov 2012 NIST CC Forum & Workshop VI Re-Assess Progress & Phase 2 Plan Standards liaison, SAJACC, FedRamp & other technical advisory, Guidance, Koala USG Cloud Computing Technology Roadmap Version 2 USG Cloud Computing Technology Roadmap Version 2 Analyze Phase 1 working group & project results Complete 1 st draft for public comment USG Cloud Computing Technology Roadmap Version 1 SP 500-293 USG Cloud Computing Technology Roadmap Version 1 SP 500-293

5. National Institute of Standards and Technology Information Technology Laboratory 5 Strategic Next Steps – Verify USG High Priority Cloud Computing Requirements using Roadmap Volume I as a vehicle Collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group Intent is to leverage PAPs that are identified as complete or under way by cloud stakeholder community; some may fall within NIST scope 30 Day Public Comment Period Core Elements: Prioritized strategic and tactical requirements that must be met for USG agencies to further cloud adoption; Interoperability, portability, and security standards, guidelines, and technology needed to satisfy these requirements; Recommended list of Priority Action Plans (PAPs) -- candidates for voluntary self-tasking by the stakeholder community. Written comments on both volumes of the SP 500-293 may be sent to: Robert Bohn, National Institute of Standards and Technology, 100 Bureau Dr., Stop 2000, Gaithersburg, MD 20899-2000. Electronic comments may be sent to: ccroadmap.comments@nist.gov

6. National Institute of Standards and Technology Information Technology Laboratory 6 Immediate Next Steps to advance strategic & tactical objectives…. Use Cloud Computing program work summarized in Volume II... in advance of and in parallel with roadmap comments & PAPs Reference Architecture & Taxonomy Recommend Industry Mapping so that USG agencies & others can more easily and consistently compare cloud services In parallel, support formal standards development process leveraging the reference architecture Standards Provide avenue for USG agency engagement Continue standards roadmap Target Business Use Cases & SAJACC Expand initial use case set & use SAJACC to identify gaps Security leverage working groups to finalize special publication focusing on challenging security requirements Continue technical advisor role – e.g. FedRAMP, continuous monitoring, conformity assessment system Use collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group to continue to validate findings

7. National Institute of Standards and Technology Information Technology Laboratory 7 Tactical Next Steps that supports Federal Cloud Computing Strategy & overall objective to support USG adoption Use collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group to continue to validate methodology, generic use cases, processes & develop the content Technical guidance in the context of:

8. National Institute of Standards and Technology Information Technology Laboratory 8 NIST CLOUD COMPUTING COLLABORATION SITE NIST-led projects & working groups http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/WebHome Public NIST cloud web site url http://www.nist.gov/itl/cloud/index.cfm

9. National Institute of Standards and Technology Information Technology Laboratory 9 NIST invites you to collaborate with us on Cloud Computing! November 4, Workshop (morning) November 3, Real-time Collaboration in the Hall of Flags US Federal Cloud Computing references: www.cio.govwww.cio.gov Public NIST cloud web site: http://www.nist.gov/itl/cloud/index.cfmhttp://www.nist.gov/itl/cloud/index.cfm United States Department of Commerce National Institute of Standards and Technology Information Technology Laboratory 100 Bureau Drive Stop 2000 Gaithersburg, MD 20899-2000 Tel: (301) 975-4500, cloudcomputing@nist.gov