Session #4 Reducing the Burdens on Government & Industry Through Certification & Accreditation Chair: Jacques Durand, Fujitsu International Cloud Symposium th – 12 th October 2012 Washington DC 1

Certification and Accreditation – the need  A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary.  Testing would need to verify that the specified functions required for any given service are in place.  But how successful generally are Certification and Accreditation programs?  The conclusions of this session will be used by the new Cloud Requirements TC (PACR). International Cloud Symposium th – 12 th October 2012 Washington DC 2

The issues  Which of the non-technical components in a Cloud service can be tested and included in an Accreditation program?  How can the client remain in control of its assets through an Accreditation program?  Existing / Planned Accreditation programs that can be used?  Which organizations, public or private, are best placed to run an Accreditation program?  Would the costs be prohibitive ?  Other aspects of introducing an Accreditation program ? International Cloud Symposium th – 12 th October 2012 Washington DC 3

Panellists Colin Wallis, Authentication Standards Manager, Internal Affairs Dept, New Zealand Government & TC Representative, OASIS PACR Lisa Carnahan, Computer Scientist, Standards Coordination Office, National Institute of Standards & Technology Anne Caldas, Senior Director, Procedures & Standards Administration, American National Standards Institute (ANSI) Ado Trakic, Open Data Center (ODCA) Representative, Enterprise Architecture – Marriott International Alan Sill, Vice President of Standards, Open Grid Forum & Site Director, Center for Cloud and Autonomic Computing, Texas Tech University Salvatore d’Agostino, WG Representative, Kantara Identity Assurance Accreditation and Certification Program International Cloud Symposium th – 12 th October 2012 Washington DC 4