This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Boosting Productivity and Innovation Through Public Sector Compliant Cloud Services dr. Mišo Vukadinović IT and e-Services Directorate Ministry of the Interior, Slovenia September 26, 2014

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Agenda Cloud for Europe (C4E), FP7-ICT 1.Project Mission 2.Project Objectives 3.Expected Outcomes 4.C4E Major Deliverables 5.Challenges Addressed by C4E 6.Service Selection and Pre-Commercial Procurement

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Cloud for Europe brings together public authorities and industry to support public sector cloud use. Identify obstacles for cloud use in the public sector Define services hindered by those obstacles Procure research from industry to find innovative solutions for cloud services Give a clear view on public sector requirements and usage scenarios Establish suitable contractual terms for future cloud procurements Project Mission

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Project Objectives Enable public sector cloud adoption in open dialogue between public sector and industry Address concerns on data protection, security, legal and contractual aspects Support related research from industry Use of pre-commercial procurement (PCP) as an instrument for innovation in the public sector

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Expected Outcomes Pre-commercial procurement terms, do's and don'ts, opportunities and pitfalls are understood Innovation through PCP research Public sector in Europe is empowered to procure cost-effective, secure and reliable cloud services A boost in cloud service usage within EU public sector

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Phases of reference PCP process

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR C4E Project Partners REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR C4E Major Deliverables WP2 - Legal aspects of cloud services WP3 - Gap analysis Public sector study Study of market vendor offerings and PA requirements WP4 - PCP Preparation Services Catalogue WP5 - PCP Execution WP9 - Validation Exclusion, selection and award criteria for PCP Validation procedures WP10 - Communication Twitter, Linkedin, YouTube

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Service List Consolidation Piloting Services Horizontal Services 1. Basic Communication 2. Document Mgmt. and Collaboration 3. Customs Supply Chain 4. Customs Data Pipeline 5. Legislation-Aware Storage 6. European Citizen Initiative 7. Archive as a Service 8. Secure Personal Data and Document Vault 9. Documents and Files Interoperability Node 10. eDocument Service 11. Restful Secure Distributed Collaboration Tools 12. Legislation Executing Cloud Services 13. Personal Digital Asset Service 1. eID as a Service 2. Encryption as a Service 3. Independent Third Party Assurance 4. Public Administration Cloud Services Broker 5. Cloud Certification as a Service 6. Resilient Open-Source Cloud Services Stack 7. Changing the Cloud Provider

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Final Services Selection Piloting Services Secure Legislation-Aware Storage Legislation Executing Cloud Services Horizontal Service Federated Certified Service Brokerage for EU Public Administration Cloud

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Secure Legislation-Aware Storage A cloud service procurer can: express its national (or local) legislative requirements and restrictions when procuring a cloud service have some control on the respect of the regulatory requirements during service execution Both sole storage or part of a service… …basis for a Personal Digital Asset service used to share documents and data between government and citizens/companies Cloud service encryption, archive and storage platform compliant with… …requirements of public administrations …requirements and rights (access to personal data) of citizens Abstract / use case

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Secure Legislation-Aware Storage Establish trust by contractual means Make easier the selection (and the procurement) of legislation compliant cloud (storage) services Make available new tools to manage the access rights of the citizens to personal data in a legislation compliant way Tackle with multiple regulations concerning the storing of data… …archiving …disclosure …restricted access to backups Issue

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Legislation Executing Cloud Services A legislation executing cloud service is a cloud service, that accomplishes certain requirements imposed upon cloud actors by national or international legislation Provides another way of dealing with legal barriers Use case examples: Notify unauthorized access to data by hackers or intelligence surveillance Keep sensitive data within a given jurisdiction Abstract / use case

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Solutions can take various forms: A framework (methodology, guidelines, specifications) Generic services to be combined with business services Services, integrated with business services Legislation Executing Cloud Services Aimed solution

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Federated Certified Service Brokerage for EU PA Cloud Cloud services user in public administration should have an absolute guarantee that cross-border provided services are secure in terms of country and EU legislation, privacy protection and security. Country PA clouds are heterogeneous (Governmental Clouds, ENISA, 2013), at different stage of development and the only realistic way how to overcome fragmentation is the creation of a federated EU PA cloud. National/cross-border compliance guarantee should be provided through a dynamic real time cross-border service certification monitoring within Federated EU PA Cloud. Abstract / use case

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Challenge is to create FCSB which will enable secure legislation-aware exploitation of cross-border provided services within Federated EU PA Cloud. Following issues should be resolved for EU Federated PA Cloud Interoperability Service governance Data portability Identity propagation Federated Certified Service Brokerage for EU Issue and Aimed Solution

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Service certification Architecture of components, one for each property to be assessed Automated certification with assurance of consistency and elasticity Legislation awareness Legislation semantics standardization Interface for legislative changes propagation Legislation compliance assessment Service usage metering Federated Certified Service Brokerage for EU Issue and Aimed Solution

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR How to engage? PCP tender release: September/October 2014 TED (Tenders Electronic Daily) C4E website

This project is partially funded by the European Union’s Seventh Framework Programme: FP7-ICT and Grant agreement no: REPUBLIC OF SLOVENIA MINISTRY OF THE INTERIOR Visit to join! Project news (quarterly e-newsletter) Invitations to review progress and provide input at national and European stakeholder events Guidelines and training on the pre-commercial procurement process Stakeholder Group