Click to edit Master title style

Cloud Computing Initiative

Vision and Strategy Document

February 2011

1
 Cloud Computing
Click to edit Master title style
Vision and Mission
Cloud Computing Vision Statement
Establish secure, easy to use, rapidly provisioned IT services for
the Federal Government, including:
• Agile and simple acquisition and certification processes;
• Elastic, usage-based delivery of pooled computing resources;
• Portable, reusable and interoperable business-driven tools;
• Browser-based ubiquitous internet access to services; and
• Always on and available, utility-like solutions.

Cloud Computing Mission Statement

Drive the government-wide adoption of cost effective, green and
sustainable Federal cloud computing solutions.

This information is draft and has not been published, please do not disseminate 2
 Cloud Capabilities
Click to edit MasterMust
titlebe Tailored to
style
Government’s Unique Needs

Federal Government
Considerations for Cloud Computing
Cloud Computing
Security & Delivery & Interoperability
Services Data Privacy Operations & Integration

Software as a Service (SaaS) Offer different Enable Develop

levels of adoption of interoperability
• Citizen Engagement (Wikis, Blogs, Data.gov) security and Cloud standards in
• Government Productivity (Cloud based tools)
•
data privacy Computing conjunction
Business Enablement
Enablement (Salesforce.com)
(Salesforce.com)
• Enterprise Applications (Core Mission & Business Svcs) based on the services in with the
application and different Cloud industry to
Platform as a Service (PaaS) nature of the models provide
services including interoperability
provided. Public, Private, at the data
•• Database and Database Management Systems
•• Developer / Testing Tools
Hybrid and infrastructure,
•• Virtual Environments Potential Community platform and
standardize models. application
Low, Med and levels.
Infrastructure as a Service (IaaS) High
• Computing
categories for
• Storage Simplicity.
• Application hosting

3
 Click to edit
The NIST Master
Definition titleMultiple
Offers style Delivery
Models for Cloud Computing
Outsourced Cloud Sourcing Models Government

High Private Cloud Commercially Hosted: Private Government Cloud :

Publically available Cloud Computing The cloud infrastructure is operated solely for an
services offered through commercial sources organization. It may be managed by the
that are dedicated and separate from the
Trust (Security and Data Privacy)

organization or a third party and may exist on

Public both physically and logically and must premise or off premise.
to remain within the U.S. borders to support
heighted data security and privacy
requirements. Access to these services are
provided through a dedicated Government Private
Intranet and is not accessible from the Public
Government
Commercially Dedicated Private
Internet.
Hosted Intranet Government
Cloud Cloud

Community Cloud: The cloud infrastructure

is shared by several organizations and
supports a specific community that has
Public Cloud: shared concerns (e.g., mission, security
The cloud infrastructure is requirements, policy, and compliance
made available to the general considerations). It may be managed by the
public or a large industry group Community organizations or a third party and may exist
and is owned by an Cloud on premise or off premise.
organization selling cloud
services. Public Hybrid Cloud: The cloud infrastructure is a
Public Internet composition of two or more clouds (private,
Cloud
community, or public) that remain unique
entities but are bound together by
standardized or proprietary technology that
Low Hybrid Government Cloud enables data and application portability (e.g.,
cloud bursting).

4
 Federal
Click to Cloud Computing
edit Master title style
Goals and Objectives
 Establish and Manage Governance  Enable Implementation and Adoption
 Manage Cloud Computing Executive Steering Committee  Assist and Guide Agencies to Implement and Roll out Cloud Solutions (e.g.
and Cloud Computing Agency Advisory Council Service Provisioning)
 Establish and Manage Communities of Practice and  Facilitate Identification of Agency Partners for Pilot Activities
Working Groups  Develop Methodologies to Effectively Assess and Implement Services
 Coordinate Policy and Strategy Development and  Develop and Disseminate Cloud Services Operating and Business Models
Participation in other Governance bodies related to Cloud
Computing activities (e.g. Security, Records Management,
eDiscovery)
 Enable Sustainable & Cost-Effective
 Establish a Federal C&A Process Computing (Green IT, TCO)
 Develop and Manage Business Case Templates
 Provide Procurement Leadership  Identify Core Evaluative Criteria
 Develop Acquisition Vehicles to Ease Agency Procurement  Identify Cloud Computing Performance Metrics (Enterprise and Technical)
of Cloud Computing Solutions
 Develop Case Studies, Best Practices/Lessons Learned to Specifically
 Coordinate across the Federal Acquisition community to Demonstrate Support of Sustainability and Cost Effective Computing
ensure adoption and implementation of cloud-related
procurement policies and processes
 Facilitate Adoption of the Cloud Computing Storefront
 Operate as a Service Provider
 Identify and Offer Government Wide Services (e-mail, instant messaging,
 Drive Cloud Technology Innovation Web 2.0 tools, etc)
 Assist Agencies in Determining Their Role in Developing/Hosting Services
 Identify Common Cloud Services and Foster Standards
Development and Security Policies  Facilitate Common Interfaces to Integrate Existing Federal Cloud service
environments
 Develop Architectures that Allow Agencies to More
Effectively Implement and Leverage Cloud Computing
Services
 Conduct Outreach Activities
 Establish, Manage and Coordinate Cloud Computing  Develop the Cloud Services Communications Plan
Developer Communities and Application Libraries  Design and Implement a Central Information Portal for Federal Cloud
 Enable the Reuse, Modularity and Interoperability of Cloud Computing
Computing Services  Develop and Manage Content for Communications
 Manage Cloud-related Wikis, Blogs, Portal, and other collaborative media
 Develop and present Training

This information is draft and has not been published, please do not disseminate 5
 Federal
Click to Cloud Computing
edit Master title style
Goals and Primary Objectives and Initiatives
Goal
GoalArea
Area Primary
PrimaryObjective
Objective Primary
PrimaryInitiative
Initiative
Establish
EstablishSecurity
SecurityInitiative
Create Federal Establish
Establishand
andManage
Manage
Establish
EstablishaaSecurity
Security and
Initiative
Working and Implementand
Implement andManage
Manage
policies on Governance
Governance WorkingGroup
Group aaFederal
FederalC&A
C&AProcess

Lead
Process

Lead
security, Identify
IdentifyCommon
CommonCloud
Cloud
standards, and Drive
DriveCloud
CloudTechnology
Technology Services
Services&&Foster
Foster Develop
DevelopRequirements
Requirementsforfor
Innovation Standards
governance Innovation StandardsDevelopment
Development&& Portability
PortabilityStandards
Standards
Security
SecurityPolicies
Policies
Develop
DevelopAcquisition
Acquisition
Vehicles Develop
DevelopAcquisition
Provide
ProvideProcurement
Procurement VehiclestotoEase
EaseAgency
Agency Acquisition
Procurement Roadmap
Leadership
Leadership ProcurementofofCloud
Cloud Roadmap
Provide cloud Computing
ComputingSolutions
Solutions
Enable
Enable

computing Facilitate Assist

Assist&&Guide
GuideAgencies
Agenciesto
to Identify
Facilitate Implement Identifyand
andFacilitate
FacilitateCloud
Cloud
solutions in Implementation Implement CloudSolutions
Cloud Solutions Computing
Implementation (e.g. Computing AgencyPilots
Agency Pilots
(e.g.Service
ServiceProvisioning)
Provisioning)
support of
Federal agency Operate
Operateas
asaaSolutions
Solutions Develop
Developthe
theCloud
CloudServices
Services
Provider Develop
DevelopServices
ServicesRoadmap
Roadmap
missions Provider Business
BusinessModel
Model

Design
Designand
andImplement
Implementaa
Conduct Central
Central InformationPortal
Information Establish
EstablishCommunications
ConductOutreach
Outreach Portal Communications
Activities for
forFederal
FederalCloud
Cloud Initiative
Initiativeand
andDevelop
DevelopPortal
Portal
Activities
Provide strategic Computing
Computing
Support
Support

roadmaps, best
Identify
IdentifyCloud
CloudComputing Establish
EstablishPerformance
practices, and Performance
Computing Performance
Enable
EnableSustainable
Sustainable&& PerformanceMetrics
Metrics Metrics
MetricsInitiative
Initiative
acquisition Cost-Effective
Cost-Effective
guidance Computing
Computing
(Green
(GreenIT,
IT,TCO)
TCO) Define
DefineData
DataCenter
Center Develop
DevelopData
DataCenter
Center
Optimization
OptimizationStrategy
Strategy Analysis
Analysis andAgency
and AgencyGoals
Goals

This information is draft and has not been published, please do not disseminate 6
 Federal
Click to Cloud Computing
edit Master title style
Transition Plan
Workstream
Workstream 2010
2010 2011
2011 …
…
Manage ESC, CCAC and Working Groups (ongoing)

Program Finalize Communications Plan Conduct Outreach Activities (Summits, Online Discussions, Training, etc.)
ProgramManagement/
Management/
Governance/
Governance/ Develop Portal Coordinate with Working Groups and Agencies to Collect Content for Portal (ongoing)
Communications
Communications Coordinate Policy and Strategy Development (eDiscovery, Records Management, Privacy, etc.)
Identify Integration and Coordination Points between Working Groups and other Government Fora (ongoing)

Develop Standards Roadmap Work with Industry Standards Bodies (ongoing)

Validate Standards Use Cases
Standards
Standards Identify Security Standards Requirements Work with Agencies on Enabling Standards Adoption (ongoing)
Identify Interoperability and Portability Standards Requirements Identify Manageability Standards Requirements

Stand Up Federal C&A Process Work with Agencies and Industry to Facilitate Use of the Federal C&A (ongoing)
Fully Inventory Security Challenges (e.g. identify FISMA gaps)
Security
Security Identify Pilots or Other Projects that can Test Security Issues Implement and Manage Pilots
Identify Security Policy Issues, Coordinate Feedback and Determine Recommendations

Develop Acquisition Roadmap Coordinate Across the Federal Acquisition Community to Implement Procurement Policies

Acquisition/ Develop Services Roadmap Establish, Manage and Coordinate Developer Communities and Application Libraries
Acquisition/
Procurement/
Procurement/ Award IaaS Release PaaS RFI Develop Guidelines for Leveraging Contract Vehicles Develop Draft SOWs
Services
Services Facilitate Adoption of Apps.Gov
Maintenance of Apps.Gov (ongoing)

Identify Technology Center Initiatives and Agency Pilots Implement, Manage Pilots and Capture Best Practices and Lessons Learned
Adoption
Adoptionand
and Develop Cloud Computing Maturity
Develop Cloud Computing Implementation Guide for Agencies
Implementation Model
Implementation Establish Performance Metrics Initiative Identify Cloud Computing Performance Metrics

(Sustainable Develop Cloud Segment Architectures Assist Agencies in Implementing/Providing Cloud Solutions and Services
(Sustainableand
andCost-
Cost-
Effective
Effective Computingand
Computing and Develop Analytic Framework Develop Data Center Recommendations for Agencies Develop and Manage Templates
Data
DataCenter
CenterConsolidation
Consolidation Conduct Data Center Analysis Develop Data Center Assessment Guide and Maturity Model
and
andOptimization)
Optimization)
Identify Data Center Pilots and Develop Tools Assist Agencies in Data Center Optimization Strategies

This plan is currently under consideration and should be considered Notional/Draft. 77

 Cloud Computing
Click to Initiative:
edit Master title style
Governance Model
The Cloud Computing PMO is the nucleus of Cloud Computing Initiative for the Federal Government,
setting direction, establishing guidelines and defining the future vision and architecture

Gov
Agencies
• Cloud Computing Vision /
• Data Call
Mission
• Requirements
• Information Portal
• Interests & Feedback
• Market Research / Use Cases
• Policies and Guidelines
• Enterprise Architecture
• Apps.gov / Procurement Support
• Information Dissemination
• RFI/RFPs • Virtual Online Summits
• Definitions
• Security
CC • Standards Requirements
Requirements PMO • Security Processes
• Standards • Procurement Approaches
Requirements • Best Practices
• SLAs • Gov-wide Communications

Vendors CCESC/ Security

CCAC
Cloud Computing
Working Groups
• Compliant Services and Offerings • Direction and Guidance Standards
• Input to Standards • Facilitation
• Collaboration on Developing • Schedule and Coordination
Standards & Best Practices Ops
Comm Excellence

8
 Working
Click Groups
to edit Provide
Master titleSupport
style Across All of
the Goal Areas and are Driven by the CCPMO
Goal
GoalArea
Area Cloud Computing Program Management Office
 Security Working Group
Establish
Establishand
andManage
Manage  Identify Functional Leader and Membership
Governance
Governance  Develop Objectives for Cloud Computing Advisory Council Security Working Group (e.g.
Establish a Federal C&A Process)
 Define Intended Deliverables
Each Working Group
Provide  Develop Security Roadmap
ProvideProcurement
Procurement will ultimately establish
Leadership
Leadership  Standards Working Group its own objectives and
 Identify Functional Leader and Membership plan of action – items
 Develop Objectives for Group
referenced here are just
Enable Define Intended Deliverables
EnableAdoption
Adoptionand

and a sample
Implementation
Implementation
 Develop Standards Roadmap

 Operational Excellence Working Group

 Identify Functional Leader and Membership
Operate
Operateas
asaaService
Service  Develop Objectives for Group
Provider
Provider  Define Intended Deliverables
 Develop Operational Excellence Roadmap
 Assist and Guide Agencies to Implement and Roll out Cloud Solutions
 Develop Case Studies, Best Practices/Lessons Learned
Conduct
ConductOutreach
Outreach  Facilitate Identification of Agency Partners for Pilot Activities
Activities
Activities  Develop Methodologies to Effectively Assess and Implement Services
 Develop and Disseminate Operating Models and Business Processes

Drive
 Communications Working Group
DriveCloud
CloudTechnology
Technology
Innovation  Identify Functional Leader and Membership
Innovation
 Develop Objectives for Group
 Define Intended Deliverables
Enable  Develop the Cloud Services Communications Plan
EnableSustainable
Sustainable&&
Cost-Effective  Design and Implement a Central Information Portal for Federal Cloud Computing
Cost-EffectiveComputing
Computing
(Green  Develop and Manage Content for Communications
(GreenIT,
IT,TCO)
TCO)
 Develop and Conduct Training

9
Government Cloud Services
Click to edit Master Model
title style
Online User Interface

10
 Federal
Click to Cloud Computing
edit Master title style
Cloud Program Services Model
To deliver the Online User Components Description
Interface, the government 1 Customizable • One stop shop/ single view for Users to
User Page manage interactions with Cloud Services
must address the following
Application • Applications and content made available to
Service Components… 2
Library Users through a simple GUI. These
applications / content can be downloaded
easily from the Library.

3 Online User • Online storage for Users to maintain and

1
Storage manage individual User files, data and objects
2

Customizable Application 4 Collaboration • Widgets that allow Users to collaborate and

User Page Library generate content. These widgets may include
Wikis, Blogs, and IM
7 Access / • Network connectivity and devices to access
Provisioning / Online User 3 5
Admin Tools Cloud Storage Connectivity Cloud services
Services
6 Cloud Standards • Cloud standards allowing the integration and
Cloud Standards /
Collaboration
/ Interoperability interoperability of services from multiple
Interoperability Clouds
Access / 4 • Provisioning and administrative tools to
6 7 Provisioning /
Connectivity
Admin Tools provide control of User profiles, access
5
technical support, and manage privilege,
Security / authorization to applications and content
8
Data Privacy
8 Security / • Applying security framework and data privacy
Data Privacy standards for Federal Cloud Computing

11
 Government Cloud Services
Click to edit Master Model
title style
Cloud Relationship View
Government
Private Clouds
Commercially Hosted
Behind the scenes are the Government Private Clouds
Private Clouds DMZ
core cloud services that
DMZ
support the daily functions for
Government employees Government
Hybrid Clouds
Single Security Provisioning Procurement Reporting
Sign on C&A Integration Financials Management

Public
Cloud Vendors

Public
Internet Cloud Vendors

12
 Federal
Click to Cloud Computing
edit Master title style
Draft Services Framework
User Tools

Software as a Service (SaaS) / Applications Application User/ Admin Reporting &

Integration Portal Analytics
Citizen Engagement Gov Productivity Gov Enterprise Apps
Business Svcs
Wikis
Wikis // Blogs
Blogs Email
Email // IM
IM Customer
Apps Customer //
Account
Core Mission
Core Mission
Social Networking Virtual Desktop Mgmt Analytic
Analytic
Apps
Apps API’s Tools
Agency Website Legacy Apps
Office
Office Automation
Automation User
Hosting (Mainframes) User Profile
Profile
Mgmt
Cloud Services

Workflow Mgmt Data Mgmt

Engine
Platform as a
Service (PaaS) Database
Testing
Testing Developer
Developer Order
Order Mgmt
Mgmt Reporting
Tools
Tools Tools
Tools EAI
Directory Knowledge
DBMS
DBMS Trouble
Trouble
Services Mobile Mgmt
Device Mgmt
Integration
Integration
Billing /
Infrastructure as a Data
Data Invoice
Virtual
Virtual Invoice
Service (IaaS) Storage Machines
Machines
Migration
Migration Tracking
Tracking
Tools
Product
CDN Web Servers Server Hosting
ETL Catalog
Catalog

Service Mgmt & Service Inventory CoS/QoS Utilization App

Service SLA Mgmt Inventory CoS/QoS Utilization App Perf
Perf DR
DR // Operations
Operations
Provisioning Provisioning Mgmt Mgmt Monitoring Monitoring Backup Mgmt
Core Foundational
Capabilities

Security &
Data/Network Certification & Authentication & Auditing
Auditing &
&
Data Privacy Security
Data Privacy
Compliance Authorization Accounting
Security Compliance Accounting

Data Center Routers Hosting

Routers // LAN/WAN
Internet
Internet
Facilities Firewalls LAN/WAN Access Centers

13