National information infrastrcuture_Rrecommendations to Deptt of Electronics & IT Govt of India on policy framework and institutional mechanism

Cisco ConfidentialCisco IBSG © 2011 Cisco and/or its affiliates. All rights reserved. Internet Business Solutions Group 1

TM

National Information Infrastructure (NII – 2.0): Recommendations on Policy Framework and Institutional Mechanism

Submitted to Department of Electronics and Information Technology, Government of India

Prakash Kumar

Cisco Consulting Services

2 August 2013


NeGP Vision and its COMPONENTS

2

ICT Infra Applications Core Policies and Capacity Buliding

Core Infrastructure

• Network(SWAN,

• Data Center (SDC) and

• Assisted kiosks (CSC )Support InfrastructureTechnical AssistanceR&D

MMP applications like

CCTNS, Vahan, Sarathi,

CARD etc.

Core PoliciesHRD & TrainingAwareness & AssessmentCreation of specialized manpower (SeMT and PeMT)

Landscape has changed since 2006 when NeGP was conceptualized.Lots has changed including experience about implementing MMPsHence, the need for a re-look at the approach and strategy.

Vision: “Make all Government services accessible to the common man in his locality, through common service delivery outlets and ensure efficiency, transparency & reliability of such services at affordable costs to realise the basic needs of the common man.”

Green: In place


State MMP Implementation Status


State MMP Implementation ScoreAn

dhra

Pra

desh

Arun

acha

l Pra

desh

Assa

m

Biha

r

Chha

ttisg

arh

Goa

Guja

rat

Hary

ana

Him

acha

l Pra

desh

J & K

Jhar

khan

d

Karn

atak

a

Kera

la

Mad

hya

Prad

esh

Mah

aras

htra

Man

ipur

Meg

hala

ya

Mizo

ram

Naga

land

Odi

sha

Punj

ab

Raja

stha

n

Sikk

im

Tam

il Na

du

Trip

ura

UP

Uttar

akha

nd

Wes

t Ben

gal

A&N

Islan

ds

Chan

diga

rh

Dadr

a Na

gar H

avel

i

Dam

an &

Diu

Delh

i

Laks

hadw

eep

Pudu

cher

ry

Implementation Score

0

0.5

1

1.5

2

2.5

3

3.5


What Next?1


This Calls for Change in Approach and Strategy

For • Increased e-transactions • Faster and speedier processing• Improved efficiency• Maintaining technology currency; • Encouraging on-going innovation and competitive pricing• Greater citizen satisfaction

By• Creating an environment for a shared and secure ICT Infrastructure

• Which is provided on demand• Where procurement process is simple

• Making Apps available thru Cloud • Improving ICT capability and skills• Adopting policy measures on standards, architecture and other related issues


Experience from other Countries

UK (updated its ICT strategy in March 2011 with following objectives)

Reducing waste and project failure, and stimulating economic growth

Creating a common ICT infrastructure

Using ICT to enable and deliver change

Strengthening governance,

Canada (Aug 2011): Guiding Principles of Shared Services Canada

Innovation

Cost Efficiency

Security

Quality

Rationalization

Standardization

Sustainability


Policy Measures on consolidation of ICT infrastructure

Policy measures USA UK Australia S Korea Malaysia Canada

Data Center consolidation

√ √ √ √ √ √

Adoption of Cloud and AppStore

√ √ √ √ √

Government Network

√ √ √ √Shared ICT services across multiple agencies

√ √ √

√


Creation of a Government of India Cloud (GI Cloud) Broadband up to Panchayats through National

Optical Fiber Network (NoFN) with last mile connectivity through TSPs

Comprehensive cyber security framework Formulation of Policy on NII 2.0 Common standards

Current Strategy of DEITY

Also needed are• ICT governance, organization, capability and skills inside the

government• Reference architecture• Procurement and • Service management


NII: A Change Program

NII should be looked at as a change programme driven by a need to save money, integrate and join up ICT across the government to help accelerate delivery of services electronically to citizens and businesses.

The joined up ICT would enable joined up services wherever required/appropriate.

It should lead to greatly accelerated and simplified acquisition of ICT services delivered over network for central as well as state/local government departments/agencies.

It should also lead to development of the required ICT capability and skills in the government; common standards and reference architecture; security and identity assurance; and service management.


Creating an environment for a common and secure ICT Infrastructure

NII: Suggested Business Architecture

GI-Network

GI-Cloud

Applications

Cyber security

Com

mon

Sta

ndar

ds

Refe

renc

e Ar

chite

ctur

e

Secu

rity

& Id

entit

y As

sura

nce

Serv

ice

Man

agem

ent

Sim

plifi

ed P

rocu

rem

ent

Enabling better public services

Incr

easi

ng e

ffici

ency

Gre

ater

Citi

zen

Satis

facti

on &

En

gage

men

t

Incr

ease

d e-

Tran

sacti

ons

ICT

Capa

bilit

y &

Ski

lls

Approved To be put in place Legend End State


Experience on Network Consolidation from Other Jurisdictions

2


International Experience

• Procuring network services rather than simply procuring transport bandwidth. [UK’s Public Services Network (PSN) has adopted this path.]

• Consolidation/Integration of dedicated

government networks with aim to reduce cost and make them more secure. [Canada and Germany have decided to go on this path.]


PSN of UK

“The PSN vision requires a change in the way Public Sector procures its network services and the way in which these services are offered. PSN customers will no longer procure physical network assets and no longer handle such procurements entirely independently from each other. Instead, rather like domestic or commercial Internet users, PSN customers will simply buy network services from pre-approved suppliers, as and when required and in whatever configuration is preferred, e.g. as an integrated solution of many services, or as an individual service, across a whole organization or devoted to local groups.”


Delivering better public

services for less

Reducing waste & project failure

& stimulating economic

growth

Creating common ICT

infrastructure

Using ICT to enable &

deliver change

Strengthening governance

PSN Vision


What is the Public Services Network?

The Public Services Network (PSN) is a programme designed by the UK Government to create one network for all UK public sector organisations. Constructed as a network of networks, built to common standards that enables the delivery of public services from any place by any provider at lower cost

Born out of a need for public sector organisations to save costs and to introduce a level playing field for commercial suppliers.

Operates within central government, local government, health, defence, education and other public sector bodies.

Aims to offer a platform for innovation which avoids vendor lock-in

The Cabinet Office has unveiled the 29 companies which will offer services for the government’s Public Sector Network.


PSN as a Walled City

Walled City PSN

Streets Components of PSN

City Gates to vet traffic coming in and out.

PSN-compliant gateways to vet data coming in and out

Traffic on streets PSN Services

Anything outside the wall It is not PSN Service

Walled gardens’ within the city. The gates of such gardens will be of interest as the traffic coming out or going in will have to be walled city rules compliant.

Non-PSN services, for example, private systems operated by government departments. Traffic coming out or going in will have to be PSN compliant.


Structure

GCN: Government Conveyance Network; DNSP: Direct Network Service Provider; CoCo: Code of Connection; CoICo: Code of Interconnection; CoP: Code of Practice; DoU: Deed of Undertaking

Core Network

The GCN interconnects multiple operator networks, termed Direct Network Service Providers or DNSPs

Subscriber organisations contract to a connection from a local participating DNSP, connect via that to GCN and hence onwards to other interconnected networks and services

http://en.wikipedia.org/wiki/Telecommunications_company


Commercial Framework

In 2010 Virgin Media Business, BT, Cable & Wireless and Global Crossing signed DoU and subsequently achieved accreditation for providing GCN and IP VPN services.

In March 2012, 12 Companies were successful bidders for the initial two year PSN Connectivity framework.

In June 2012, 29 companies were confirmed as suppliers of ICT services to the UK public sector under the Government’s PSN Services framework contract


PSN Services

Wide area network

Broadband

Telephony and call centres

Public videoconferencing service

Access to commercial databases

Secure conferencing services

CCTV

Access to a government database

Data transfer via email

Virtual private network


PSN Mechanism

All cross government telecommunications procurement vehicles will be brought under control of the PSN Programme.

For migrating old networks already procured Government Secure Intranet Convergence Framework (GCF) and Managed Telecommunications Service Convergence Framework (MTCF)) have been developed.

Strong governance through the CIO Delivery Board, CIO Council and PSN Steering Committee and Programme Board has been put in place to realize full benefits of PSN.

All CIOs instructed to ensure PSN compliance prior to approval of any telecommunications spend on new builds or changes.

Extensive industry engagement to ensure that telecommunications suppliers implement the industry-led PSN standards and offer only those services to government. (Industry led PSN supplier Governance Body (PSNGB) and regular industry contact)


Shared Services Canada: Telecommunications Transformation Program (TTP)

“Shared Services Canada was formed to consolidate and streamline the delivery of IT infrastructure services, specifically email, data centre and network services. Our mandate is to do this so that all federal organizations have access to reliable, efficient and secure IT infrastructure services for the best value.”


Telecommunications Transformation Initiative under SSC

Between 2011 and 2019, the Government of Canada will transition to a single, shared telecommunications network infrastructure, while maintaining required departmental segregation of data through security domains and zones. Steps being taken:

To complete current state analysis of networks and telecommunications, to analyze business and technical requirements, to develop a target end-state and to produce an overall transformation plan.

To converge systems for voice, data and video onto the same network to minimize duplication and reduce costs;

To expand the Government of Canada's wireless network infrastructure to meet the growing requirement for connectivity to mobile devices, laptops and tablets; and

To implement a more robust, standardized network security infrastructure to enhance the Government's cyber security, resulting in improved security services, awareness capabilities, and ability to counter security threats

The initiative is in the planning stages, and will proceed in parallel with the Data Centre Consolidation Initiative.


SSC Creation Future

Shared Services Canada (SSC) Transformation Vision

Consolidated

Standardized

Innovative Strategies & Partnerships

Value for Partners & Canadians

Duplication Fragmentation Low interoperability Aging Infrastructure


VISION

Improving Service Quality• Improve levels of service and security for all

• Standardize infrastructure and platforms

• Increase system availability, reliability, robustness and scalability

• Reduce dependence on physical location (enhance mobility)

Maximizing Efficiencies• Reduce duplication of infrastructure

• Centralize operation and administration

• Determine appropriate level of private sector engagement

• Make effective use of shrinking IT budget and resources

Minimizing Risks

• Fewer, better quality facilities

• Power supply diversification

• Centralize planning and recapitalization; procurement

• Address aging IT infrastructure

• Improve information security

• Examine industry investment and risk sharing

Additional Benefits• Significant environmental benefits

• Reduce power demand

• Reduce greenhouse gas emissions (cleaner power); reduce e-waste

• Enable Workplace 2.0

• Reduce travel costs (videoconferencing / telepresence)

• Improve support to remote worker

Transformation Principles – Data Centres and Networks


Telecom vision: From –To Perspective

Key Components Elements FROM TO

Inter-buildingNetworks

Number of Wide Area Networks

50 1 (intended)

Number of WAN connections to buildings

7000+

-20%

Intra-buildingNetworks

Number of multi-tenant buildings with consolidated infrastructure

<40 >300

Number of buildings with Wireless LAN services

< 100 >3000

Telephony

Number of PBXs and key systems

850 + <100

Number of IP phones deployed

< 10,000 >150,000

Videoconferencing Number of VC bridges 82 < 12

Contact Centers

Number of contact centers (infrastructure)

100+ -50%+


SSC’s Transformation Initiatives

EmailCurrent state

Business case and plan

2012-2013

Procurement

2013-2020

Build and Migration – 43 departments; 377,000 users

Data Centres (2012-2020)Current State, Business Case, Detailed

Inventory and Plans

Networks (2012-2020)

Migration to New Data Centres (Multiple Waves)

Inter-building (WAN) - integrated and aligned with data centre consolidation plan

Intra-building (LAN) - integrated and aligned with data centre consolidation plan

Nov 2011 Jan – May 2012 June 2013 Oct 2013 – April 2015

Forums / Events• Chief Information Officer Council (CIOC)• DPI, GTEC• Executive Summit

Industry – Launch and closure of procurement process; engagement of industry based on sourcing strategies

Key Stakeholders• Ministers• Inter-departmental Advisory

Committees (IT Business Transformation)

• CIO Council• 43 Partner Departments• Unions• IndustryEn

gage

men

t

Inter-departmental Working Groups:• Security • Policy and Standards• Functional• Business Requirements• Transition• Operational & Service Mgmt• Information Mgmt




Germany’s NdB (“Netze des Bundes” or “Network of Federation”

The project NdB reflects the fact that the network infrastructure now plays a central role in the public sector like central nervous system in human body.

Functionality and availability of network infrastructures, even under difficult conditions such as natural disasters, is of vital importance to the state.

Another aim is to thwart any threat emanating from terrorists or cyber war.

Security, Reliability and Continuity of Operations: Top Concern

Implementation

1st Phase: Network Consolidation - Enablement of German Government to build and run a government owned service provider network to consolidate all government networks onto one single platform

2nd Phase: Shared Service Consolidation – Enablement of German Government to build a government owned Shared Service Centre and consolidate all redundant and similar services and processes across federal government and public administration in Germany


Other Policy Measures

UK

Open standard of data

Reference architecture

Open technical standards

End user device strategy

Information strategy

Risk management regime


Recommendations3


NII: A Change Program

NII should be looked at as a change programme driven by a need to save money, integrate and join up ICT across the government to help accelerate delivery of services electronically to citizens and businesses.

The joined up ICT would enable joined up services wherever required/appropriate.

Having put in place policies on, National Cloud, Cyber Security and Standards, time to look at Network Aggregation, Reference Architecture, ICT Capability and Skills, Service Management and Security & Identity Assurance


Recommendations: Network Aggregation

UK’s PSN (network as a service) appears best. It needs a high level of maturity in procurement of such services and a cadre of IT professionals. UK Gov has long history of outsourcing services and experienced IT staff in handling procurement of network services and other complex technology services.

PSN model is not suitable for India today. India does not have a IT cadre experienced in such complex technology acquisition.

The approach adopted by Canada and Germany towards consolidation of government networks appears much more suitable for India at this time.

Consolidation of value-added shared services with consolidation of networks should be built into the plan.

After few years of successful implementation, the PSN type model could be explored by DeitY.


High Level Architecture of Integrated Network


Suggested NKN-SWAN Integration till District HQ

Super Core

Core

SWAN

NKN District Node NKN District NodeSWAN District Node

SWAN Block Nodes SWAN Block Nodes

SWAN Block

Distric

t Leas

ed Link

NKN SWAN 1 VPNN

KN C

ore-

Dist

rict L

ink

IPSEC Enabled Broadband backup


Recommendations: Pervasive Security

Pervasive security is a fundamental architectural requirement of NII.

End-to-end security framework (applications – data centre – network – end points - interconnects between networks – interconnects between networks and data centres – interconnects between data centres) and architecture should be developed up–front and embedded in the NII 2.0 architecture.

Security architecture shouldn’t be an after-thought (no more 'bolt-on' security to the architecture).

Development and deployment of a network security policy including for interconnects (at the Gateway level for example) and mechanisms to audit the same for adherence – like the PSN example, is foundational.


Recommendations: Network based Shared Services

Along with integration of networks, services delivered over network which are currently bought and consumed by departments/agencies separately should also be undertaken.

Examples of such services are voice telephony (VoIP telephony), call centres/contact centres, unified services (messaging, collaboration, presence and IM), secure audio and video conferencing, gateway services, CCTV etc.

From state-specific VC system or VoIP to government-wide VC/VoIP systems


Recommendations: Governance/Organizational Framework

Network like Cloud will need an organizational framework like AMO, OMU etc.

It would be problematic to have parallel yet separate structures set up for the network project. —There will be some elements (at the detailed technical level)

where different experts will need to be involved and those could be identified and placed under AMO/OMU, as the case may be.

We recommend establishing a single organization for GI Cloud and Network initiatives, with AMO and OMU, so that the policy, architecture, and standards for each come from the same organization.


Recommendations: Location independent working

Government officials have started using mobile devices and senior officials demand access to applications from their mobile devices, especially for monitoring purposes. ICT providers like NIC are already grappling with this demand which is increasing day by day.

Many mobile workers are being provided tablets and they need to be connected to their systems at times for feeding data from inspection sites, pulling data to generate bills, or to serve clients where they are, etc.

If this growth in use of BYOD mobile devices is not managed carefully, it will open up new security risks.

Therefore, we recommend location independent working and bring your own device (BYOD) be included in NII.


Implementation Roadmap

Stakeholder consultation and agreement on the vision, principles, and high level architecture of Integrated/consolidated network.

Putting in place required Governance mechanism and related policies (e.g. who must use; who may use).

Identification of global standards to which the NII 2.0 should be built and operated (Networks, Data Centres, Security and Operations). Identify and deploy industry best practices where standards are unavailable or not relevant

Deployment of GI-Network (integration of NKN, SWANs, NICNET, NoFN and Gateways)

Tight coupling of Data Centres with GI-Network for secure and seamless access to the GI-Network

Implementation of HR Policy for creating positions of CIOs and CTOs with required support teams in central as well as state governments.

Institutionalization of capacity building plan by setting up dedicated training institute for training of government officials


Implementation Roadmap

Development of real-time Shared Services (esp. ICT Required to support improved collaboration), which we may call GI-Network Services, across the government enabled by integrated network like• Voice Telephony and call Centers/Contact Centers• Gateway Services• Unified Services (messaging, collaboration, presence etc.)• Secure conferencing services (audio as well as video)• Virtual desktop infrastructure (VDI) • Mobile Voice and Data• Network and IT security