1. OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC Taking Cloud Standards Testing from Ideas to Reality Alan F. Sill, Ph.D Vice President of Standards, Open Grid Forum Senior Scientist, High Performance Computing Center; Adjunct Professor of Physics; Site Director, Cloud and Autonomic Computing Industry/University Cooperative Research Center, Texas Tech University www.oasis-open.org

2. 2 OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC www.oasis-open.org Certification and Accreditation – the need  A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary.  Testing would need to verify that the specified functions required for any given service are in place.  But how successful generally are Certification and Accreditation programs?  The conclusions of this session will be used by the new Cloud Requirements TC (PACR). Let’s Re-Examine The Original Challenges To This Panel From Our Chair:

3. 3 OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC www.oasis-open.org Certification and Accreditation – the need  A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary.  Testing would need to verify that the specified functions required for any given service are in place.  But how successful generally are Certification and Accreditation programs?  The conclusions of this session will be used by the new Cloud Requirements TC (PACR). Let’s Re-Examine The Original Challenges To This Panel From Our Chair:

4. 4 OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC www.oasis-open.org  Which of the non-technical components in a Cloud service can be tested and included in an Accreditation program?  How can the client remain in control of its assets through an Accreditation program?  Existing / Planned Accreditation programs that can be used?  Which organizations, public or private, are best placed to run an Accreditation program?  Would the costs be prohibitive?  Other aspects of introducing an Accreditation program ? And the original issues:

5. 5 OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC I propose to answer all of these questions with a single formulation: A Range of Solutions Must Be Deployed In Order to Achieve Success In slightly more detail: 1.Developers, users, customers and vendors must all be involved in selection of the elements of a testing program. 2.Accreditation cannot proceed independently from validation of the expected use cases and applications. 3.The speed of cloud computing evolution requires special solutions for accreditation that are different from other computing and IT acquisition processes.

6. 6 ©2012 Open Grid Forum Open Grid Forum An Open Community-Based Forum With Open Processes Focused on Development, Implementation and Testing of Open Standards Basis for many of my claims:

7. 6 12 18 24 200120062011 GFD Publication History 2000 - 2012...

8. 8 © 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8-10, 2012 Example of OGF Standards Use: (Credit: Matteo Turilli, Oxford) EGI FedCloud Task Force Demo EGI Technical Forum 2012 – Prague 17/21 Sep

9. 9 © 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8-10, 2012 Example of OGF Standards Use: (Credit: Matteo Turilli, Oxford) EGI FedCloud Task Force Demo EGI Technical Forum 2012 – Prague 17/21 Sep

10. http://cloudplugfest.org

15. NIST CLOUD PROCESS & TWIKI http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/SAJACC

16. http://collaborate.nist.gov/twiki-cloud- computing/bin/view/CloudComputing/CloudComputingUseCases

17. 17 OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC Conclusions When testing and accrediting cloud standards, a variety of test platforms, resources and procedures is needed and these are already in use for various phases, aspects and features. A full range of approaches is needed! These range from open-access, public forums and public input requirements gathering processes to open-access forums to private testbeds that require various levels of agreements to access. All are needed to have a successful accreditation program! Speed must be balanced with thoroughness, inclusiveness with openness, proprietary features with the dynamic aspects of the cloud to encourage the broadest possible adoption and greatest acceleration of reliable results. Join us in helping this to happen!