16
21 May 2010 Cloud computing and privacy - developing some strategies - a government perspective Clifton Chan CROWN COPYRIGHT ©

Cloud Computing and Privacy Strategies

Embed Size (px)

DESCRIPTION

Presentation at Privacy Forum: The Future of Privacy, 5 May 2010, Wellington New Zealand

Citation preview

Page 1: Cloud Computing and Privacy Strategies

21 May 2010

Cloud computing and privacy- developing some strategies

- a government perspective

Clifton ChanCROWN COPYRIGHT ©

Page 2: Cloud Computing and Privacy Strategies

What is cloud computing?

Page 3: Cloud Computing and Privacy Strategies

Undefinition

“The network is the computer”

-- John Gage, Sun Microsystems, 1982

“... computing may someday be organized as a public utility ...”

-- John McCarthy, 1961

Page 4: Cloud Computing and Privacy Strategies

Definition

“a computing capability that provides an abstraction between the computing resource and its underlying technical architecture (e.g., servers, storage, networks), enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.” -- NIST

Page 5: Cloud Computing and Privacy Strategies

Characteristics

On-demand self-service

Broad network access

Resource pooling

Rapid elasticity

Measured service

-- NIST

Page 6: Cloud Computing and Privacy Strategies

Services

Software as a Service

Platform as a Service

Infrastructure as a Service

“Stack” of services

Page 7: Cloud Computing and Privacy Strategies

Types

Public clouds

Community clouds

Private clouds

Hybrid clouds

Page 8: Cloud Computing and Privacy Strategies

Potential Benefits

Fast deployment – low entry barriers

• Self provisioning/de-provisioning

• Pay for what you use

Minimum/no capital

• No large capital investment

Quality/value-for-money

• Access large economies of scale

• Access sustainable centres of practice

• Access better services

Page 9: Cloud Computing and Privacy Strategies

Paradigm

It is a form of outsourcing.

Page 10: Cloud Computing and Privacy Strategies

Why the fuss?

We outsource all sorts of things, e.g.:

Mainframe bureaus

Payroll bureaus

Watering plants

Office cleaning

Helpdesks

Page 11: Cloud Computing and Privacy Strategies

Fuss:

Data is likely to be overseas

• Outside your organisation

• Outside NZ jurisdiction

Multi-tenant

• 100’s – 1000’s of organisations

• 1,000,000’s of users

The network is often the Internet

Page 12: Cloud Computing and Privacy Strategies

Accountability

When you outsource you are still legally accountable

Page 13: Cloud Computing and Privacy Strategies

Strategies

Page 14: Cloud Computing and Privacy Strategies

Outsourcing

Risks and costs vs benefits

Privacy is a risk

• Different profile with cloud computing

Are you ready for outsourcing?

Page 15: Cloud Computing and Privacy Strategies

Privacy

Privacy Impact Assessment

Classify and value your data

Status of data

NZ law / NZ provider

Align cloud type to risks/data-value

Favourable terms of Exit

Monitor usage / contract

Stay informed

Page 16: Cloud Computing and Privacy Strategies

Questions

CROWN COPYRIGHT ©