National Institute of Standards and Technology Information Technology Laboratory 1 USG Cloud Computing Technology Roadmap Next Steps NIST Mission: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life ©Robert Rathe NIST Cloud Computing Forum and Workshop IV, November 3, 2011 Dawn Leaf, NIST Senior Executive for Cloud Computing

National Institute of Standards and Technology Information Technology Laboratory 2 The NIST Cloud Computing Program Goal Stays the same…………. Accelerate the federal government’s adoption of cloud computing* –Build a USG Cloud Computing Technology Roadmap which focuses on the highest priority USG cloud computing security, interoperability and portability requirements –Lead efforts to develop standards and guidelines in close consultation and collaboration with standards bodies, the private sector, and other stakeholders

National Institute of Standards and Technology Information Technology Laboratory 3 NIST Cloud Computing efforts Public & working groups, Standards Organization liaison (Definition & Reference Architecture submission) Standards Acceleration to Jumpstart the Adoption of Cloud Computing (SAJACC) – qualitative testing of specifications against interoperability, security, and portability requirements Guidance – Special Publications; technical advisor to Fed CIO Council (FedRAMP), Federal CC Standards & Technology Working Group Complex Computing Simulation & Modeling – Koala How to build a USG Cloud Computing Technology Roadmap 1. Define Target USG Cloud Computing Business Use Cases 2. REFINE & APPLY Neutral CC Reference Architecture & Taxonomy 3. UPDATE Cloud Computing Technology Roadmap – Translate Requirements & Identify Gaps priorities risks obstacles Vendors map services Strategic Program (continue phase 1 activities and…) Tactical Program USG Cloud Computing Technology Roadmap USG Cloud Computing Technology Roadmap... leverage Priority Action Plans (PAPs) selected for self-tasking by Cloud Stakeholder Community Assess & Track: USG CC High Priority Requirements met by Priority Action Plans (self-tasked by NIST and other CC stakeholders) Rqmt 1: International consensus interoperability, security, portability standards Rqmt 2: Solutions for High Priority Security requirements Rqmt 3: Technical Specifications to enable high quality SLAs ……. Rqmt 10: Defined and Implemented cloud service metrics Integrate results into tactical priorities Measure Results The Phase 1 Strategic & Tactical activities continue…. Now leveraging work completed in Phase 1

National Institute of Standards and Technology Information Technology Laboratory 4 4 NIST COMPUTING PROGRAM TIMELINE (PHASE 2) (USG CLOUD COMPUTING TECHNOLOGY ROADMAP INITIATIVE CONTINUES….) Nov 2011 March 2012 STRATEGICSTRATEGIC NIST Cloud Computing Special Pubs Guidelines on Security and Privacy …… Definition of Cloud Computing ………… CC Synopsis & Recommendations…… CC Standards Roadmap ………………… CC Reference Architecture…………… USG CC Technology Roadmap Draft Tactical efforts Public & Federal Standards & Technology working groups Initiate NIST CC Program Phase II Integrate & track USG Technology Roadmap Priority Action Plans (PAPs) with external stakeholders Integrate results into tactical priorities Measure Results NIST CC Forum & Workshop IV NIST CC Forum & Workshop V Nov 2012 NIST CC Forum & Workshop VI Re-Assess Progress & Phase 2 Plan Standards liaison, SAJACC, FedRamp & other technical advisory, Guidance, Koala USG Cloud Computing Technology Roadmap Version 2 USG Cloud Computing Technology Roadmap Version 2 Analyze Phase 1 working group & project results Complete 1 st draft for public comment USG Cloud Computing Technology Roadmap Version 1 SP USG Cloud Computing Technology Roadmap Version 1 SP

National Institute of Standards and Technology Information Technology Laboratory 5 Strategic Next Steps – Verify USG High Priority Cloud Computing Requirements using Roadmap Volume I as a vehicle Collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group Intent is to leverage PAPs that are identified as complete or under way by cloud stakeholder community; some may fall within NIST scope 30 Day Public Comment Period Core Elements: Prioritized strategic and tactical requirements that must be met for USG agencies to further cloud adoption; Interoperability, portability, and security standards, guidelines, and technology needed to satisfy these requirements; Recommended list of Priority Action Plans (PAPs) -- candidates for voluntary self-tasking by the stakeholder community. Written comments on both volumes of the SP may be sent to: Robert Bohn, National Institute of Standards and Technology, 100 Bureau Dr., Stop 2000, Gaithersburg, MD Electronic comments may be sent to:

National Institute of Standards and Technology Information Technology Laboratory 6 Immediate Next Steps to advance strategic & tactical objectives…. Use Cloud Computing program work summarized in Volume II... in advance of and in parallel with roadmap comments & PAPs Reference Architecture & Taxonomy Recommend Industry Mapping so that USG agencies & others can more easily and consistently compare cloud services In parallel, support formal standards development process leveraging the reference architecture Standards Provide avenue for USG agency engagement Continue standards roadmap Target Business Use Cases & SAJACC Expand initial use case set & use SAJACC to identify gaps Security leverage working groups to finalize special publication focusing on challenging security requirements Continue technical advisor role – e.g. FedRAMP, continuous monitoring, conformity assessment system Use collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group to continue to validate findings

National Institute of Standards and Technology Information Technology Laboratory 7 Tactical Next Steps that supports Federal Cloud Computing Strategy & overall objective to support USG adoption Use collaboration through public working groups & Federal Cloud Computing Standards & Technology Working Group to continue to validate methodology, generic use cases, processes & develop the content Technical guidance in the context of:

National Institute of Standards and Technology Information Technology Laboratory 8 NIST CLOUD COMPUTING COLLABORATION SITE NIST-led projects & working groups Public NIST cloud web site url

National Institute of Standards and Technology Information Technology Laboratory 9 NIST invites you to collaborate with us on Cloud Computing! November 4, Workshop (morning) November 3, Real-time Collaboration in the Hall of Flags US Federal Cloud Computing references: Public NIST cloud web site: United States Department of Commerce National Institute of Standards and Technology Information Technology Laboratory 100 Bureau Drive Stop 2000 Gaithersburg, MD Tel: (301) ,