cyber security - deloitte united states...mining a national resource cyber security ... 2009 norway...

Deloitte | A Middle East Point of View | Fall 2015 | 23

Mining a national resource

Cyber Security

Since the Obama Administration announced the“Big Data Research and Development Initiative” in2012, a number of nations across the globe have setin motion their national Big Data plans. Improvingthe government’s ability to extract insights from alarge volume of information and complex data sets is also increasingly topping the national agendas ofgovernments in the Middle East.

Big Data

Technology

24 | Deloitte | A Middle East Point of View | Fall 2015

The regulatory debateBig Data usage, by private and public entities, is comingunder increasing scrutiny from regulators and policymakers, with data privacy clearly top of mind in terms of key concerns. While there are limited instances of“Big Data regulation” internationally it has become anincreasingly important theme for regulators within andwithout the Middle East region.

The challenge is twofold. First, how can the governmentleverage the massive amounts of data available withinits different entities to deliver better service, formulatemore predictive policies and reduce operationalinefficiencies? Secondly, how can regulators set up aregulatory framework that will encourage usage of BigData within the private sector and at the same timeprovide enough assurance for the citizens that their datais not being misused?

The stars are aligned – Big Data strategy tosupport the national visionGlobally, governments have started implementing Big

Data programs, either as sectorial initiatives, or in somecases, as national plans. Eight broad themes andobjectives seem common across the various programswe have surveyed: 1. Sharing data sets among government institutions; 2. Improving policy-making, service delivery and

operational efficiency via the use of Big Data tools; 3. Personalizing government services to the needs of

citizens; 4. Empowering citizens to make more informed

decisions; 5. Solving complex public policy issues via the analysis

of large, multi-dimensional data sets; 6. Promoting innovation via the emergence of new

business models based on large government datasets;

7. Reducing the transactional costs and redundantexpenditures across government agencies; and more occasionally,

8. Benefiting from Big and Open data to increaserevenues (e.g. tax income.)

Sharing

The eight common priority themes in Big Data strategies

Improving

Personalizing

Empowering

Solving

Innovating

Saving (cost)

Growing (revenue)

Select national Big and Open Data governmental initiatives

Source: Various government websites, Monitor Deloitte analysis

Case of Obama Campaign and Social Media/ Big Data

“Linea Amica”: MultichannelInnovation for IntegratedService Delivery

Five Star Movement in Italy (Social Media)

B20 Collective Action Hub

“Smart City ” Dubai

National Statistical Agency Big Data

NHS publishing MRSA infection rates in all hospitals on data.gov.uk

Norway’s Digital Government

Government data sharing policy

Smartvote app.

County of Los Angeles MetropolitanTransportation Authority (Metro)

Mexico’s National Digital Strategy

MOGO’s Big Data tool to analyze Centel’s activities

Mapping and treating spread of disease via social media and Big Data

KSA Government Data Portal

Bahrain Open Data Portal

Karnataka Land Records Digitization

Checkmyschool.orgOpen Data in Filipino Education

Open Data Trading platform

Big Data to fight against Corruption

Open Government Data Strategy(OGDS) in Japan

SeeClickFix platform (civic improvement)

Smart City/Smart Mobility Platform(Santa Monica, California)

California Open Data (CaliforniaCampaign Finance and JudicialDisclosure Data)

United States

Los Angeles

Mexico Haiti

California

ItalyBasel

UK

Norway

EstoniaSwitzerland

GreeceChina

Philippines

Japan

Dubai

Karnataka

BahrainKSA


Technology

In some cases, a Big Data Strategy at national level has been developed to serve as a support for theimplementation of national plans. For instance inSingapore, the Big Data national strategy focuses oninfrastructure building to position Singapore as a “SmartNation” and a Big Data hub for other countries. Estoniahas been using ICT (Internet and CommunicationsTechnology) for a variety of services. It was the firstcountry to allow online voting–now 25 percent ofvoting takes place electronically and 99.6 percent ofbanking transactions happen online. Its “Digital Agenda2020” outlines the need to study innovations like BigData to deliver services to its citizens.

In the Middle East region, we are seeing the emergenceof national Big Data strategies principally focused on

three needs of government: a. To improve the efficiency of existing services by

ensuring that data is not requested multiple times for one individual;

b. To support policy making by data analysis; andc. To use Open Data to enhance engagement with

the public and businesses.

In the Middle East region, we are seeingthe emergence of national Big Datastrategies principally focused on threeneeds of government

Freedom of Access To Information (ATI) laws

Antigua & Barbuda 2004Belize 1994*Canada 1983, 2001Guyana 2011 Jamaica 2002, 2004St. Vincent & Grenadines 2003Trinidad & Tobago 1999*USA 1966, 1976, 2009

º Law used primarily to restrict ATI and freedom of expression. ^Actionable ATI regulation rather than a law.* Federal system: several states (also) have ATI laws.

Source: Various government websites, Monitor Deloitte analysis

N. America - 8

^Argentina 2003Brazil 2011Chile 2008Colombia 1985, 1998Dominican Republic 2004Ecuador 2004El Salvador 2011Guatemala 2008Honduras 2006*Mexico 2002, 2006Nicaragua 2007Panama 2002Peru 2002Uruguay 2008

Latam - 14

Angola 2002, 2006Ethiopia 2008Guinea Conakry 2010Ivory Coast, 2013Liberia 2010^Niger 2011Nigeria 2011Rwanda 2013Sierra Leone 2013South Africa 2000^Tunisia 2011Uganda 2005ºZimbabwe 2002, 2007

Africa - 13

Austria 1987, 2005Belgium 1994, 2000Denmark 1985, 2000Finland 1951, 1999, 2009France 1978, 2005*Germany 2005Greece 1986, 1999Iceland 1996, 2003Ireland 1997, 2003, 2005Italy 1990, 1997

Liechtenstein 1999Malta 2008Netherlands 1978, 1991, 2009Norway 1970, 2006Portugal 1993, 1999Spain, 2013Sweden 1766, 1976Switzerland 2004United Kingdom 2000

W. Europe - 19

Albania 1999Armenia 2003Azerbaijan 2005*Bosnia & Herzegovina 2000Bulgaria 2000Croatia 2003, 2013Czech Republic 1999, 2006Estonia 2000, 2009Georgia 1998, 2001Hungary 1992, 2003

Kosovo 2003Latvia 1998Lithuania 2000, 2005Macedonia 2006, 2008Moldova 2000, 2003Montenegro 2005Poland 2001Romania 2001, 2007Russia 2009

CE. Europe - 19

Kyrgyz Republic 2007Tajikistan 2002Uzbekistan 1997, 2003

C. Asia - 3

Jordan 2007Yemen 2012

ME - 2

*Australia 1982, ‘04, ‘09Bangladesh 2008^China 2007Cook Islands 2008*India 2005Indonesia 2008Japan 1999, 2003Maldives, 2014Mongolia, 2011New Zealand 1982, 2003Nepal 2007Pakistan 2002South Korea 1996, 2004Taiwan 2005Thailand 1997

AsiaPac - 15


Open vs. Private – the challenge of opening up dataAs for other national resources, the exploitation of Bigand Open Data needs to be carefully governed,particularly in the early days of adoption. The primarylegal, ethical or sometime national security challengescome from the degree of openness of data: which datasets can or should be shared and under which terms?

Historically, in many markets, there have been two setsof policies defining the perimeters of this issue: privacylaws and freedom of access to information legislation.Privacy laws are becoming increasingly widespread. Thenumber of privacy laws grew from 20 in the 1990s toover 100 now. However, not all countries are equal intheir data privacy law maturity. Examples of countrieswith a comprehensive privacy law include all Europeanmember states (27 countries), Singapore, and Canada.Countries such as South Africa and Australia are also inadvanced stages of creating legislation. A number ofcountries such as the United States have sectorial lawsgoverning data privacy in particular areas (such aschildren’s medical records or financial information.)Freedom of access to information (FoAI) laws on theother hand, allow access by citizens to data held bynational governments. They establish a “right-to-know”legal process by which requests may be made forgovernment-held information. This type of legislation isas widespread as privacy laws although their prevalencein the Middle East is very low (only two countries:Jordan and Yemen.)

In the Middle East North Africa region,the first challenge to Big and Open Data regulation has been the lack ofunderlying legal instruments


In contrast with data privacy laws, Open Data laws are still relatively few as their origins are more recent(post-2010) and include laws such as the 2014 Digitalaccountability and transparency act in the United States.In many cases, instead of full fledge laws, Open Datapolicies were developed, for instance the EC directive2003/98/EC on the re-use of public sector information,which took root in the FoAI laws mentioned above.

In the Middle East North Africa region, the firstchallenge to Big and Open data regulation has been the lack of underlying legal instruments. Privacy laws are being developed but do not always have a trackrecord of implementation and the limited number ofcountries with FoAI frameworks makes it even moredifficult to have Open Data laws or data sharing policiesin place. Overall the region still has a long way to go on data sharing as demonstrated by the current lowranking of most Middle East nations, with all GulfCooperation Council (GCC) countries ranked below the50th global rank in the Open Data Barometer. However,some interesting initiatives are underway across theregion–the UAE and Qatar have plans to launch orrevamp their open data portals and Saudi Arabia hasrecently launched a new Open Data portal(http://www.data.gov.sa/).

Managing data accessOpen data is however only one component in the vastrealm of applications of government Big Data. Sharinginformation among government institutions can alsolead to significant value creation across one of the eightthemes discussed above. Nevertheless, with largeamounts of data available but also scattered amongdifferent entities, it is critical to establish a structuredframework to collect, analyze and share the data.

Sharing data within government entities or between thepublic and private sectors has promoted the creation ofinnovative products and services. This becomesincreasingly of value when developing smart cities, sincesmart city services will require automated interactionsbetween public and private sector companies throughstandard data interfaces. For example when Londonreleased its maps of the tube to the public, new onlineand mobile applications were created by entrepreneursto improve the usage of the tube.

The flipside to sharing data this freely is security.Countries are often struggling to strike the balancebetween improving services and exposing the country to threats unintentionally. It is well-known that multiplestreams of open data can be overlaid to deducepotentially sensitive information. For example, it may be possible to deduce the destination and movement of oil supplies via ships from oil production data andport vessel movement data.

Technology

Open data is however only onecomponent in the vast realm ofapplications of government Big Data.Sharing information among governmentinstitutions can also lead to significantvalue creation.


Prevention, as the old adage recommends, is better than a cure. Governments can mitigate these risks byadequately whetting the data through a consistent andcoherent framework. It starts with putting the databroadly in buckets that mark it as open or closeddepending on the national or institutional policy.Buckets that are classified as potential for Open Datathen need to be assessed for consumption by the publicby ensuring that sensitive private or national data isrendered anonymous, or removed. The data shouldideally then go through at least one more round ofchecks by qualified data scientists that look at the risksof releasing the data sets. The broad selectionframework should be tailored to the government’spolicies.

Regulating data monetizationAnother issue that needs to be considered whenaddressing the regulatory framework of Big and OpenData is the price tag of data. The general consensus isthat Open Data is free to access and use, but not allorganizations are willing to give away their data for free.Organizations often consider their data to be part of

their Intellectual Property and are reluctant to foregoadditional revenues for the cause of open data. Telecomcompanies are a case in point as they typically sit on avariety of structured (call data, geo-location data) andunstructured data (web browsing logs, social mediaposts, app usage patterns, etc.) that has high valuewhen analyzed. For example, retailers are usually willingto pay for information that tells them the density andprofile of customers in the vicinity of their locationduring different times of the day. However, these andother types of geo-location data are very useful inproviding public services as well. In Sierra Leone,telecom data has been used to predict day-to-dayoutbreaks of Ebola and take preventative action tocontain the disease. This natural tension betweenopening data and monetizing it will need to be carefullythought through by governments in the region as theyweigh the potential costs and benefits of a free versus apay model for data access.

Capability building: data scientists are the newunicorns! With an increasing role as Big Data regulators andpromoters, a key challenge for governments in theregion will be capability building. Big Data is bringingabout a new breed of roles and job positions both in the core business and in the Information Technology (IT)departments of public and private organizations.

The analysis of real-time structured and unstructureddata requires not only sophisticated systems but alsonew resources that did not exist several years ago. The presence of data owners, governors and stewardsamong others is as much part of the sophisticated

Another issue that needs to beconsidered when addressing theregulatory framework of Big and OpenData is the price tag of data


system as the mining tools, business intelligenceapplications, and server and network infrastructure. The emerging positions and roles are becoming moredifficult to fill due to the increasing need to have bothbusiness and technical knowledge and skills. Moreover,the limited existence of skilled professionals currently inthe industry’s workforce hinders effective knowledgeand skill transfer. This is eventually leading to increasedreliance on contractors and consultants, which in turnchallenges organizations in terms of skill retention andfuture capability building.

Going forward, it will be crucial for governments toinvest in building their capabilities around Big Data ifthey want to achieve tangible results from their Big Datastrategy. Although this will involve significant investmentin capturing and retaining key talents, it will alsodemand stronger awareness of Big Data and itsoperations among the government leadership as well asHuman Resource managers and talent specialists. Theprofiles required for the realization of national Big Datastrategies are not only sophisticated but also often aunique blend of skills (e.g. Physician crossed with Dataspecialist.) Data Scientists are the new unicorns of thetalent pool.

by Emmanuel Durou, Partner, Technology, Media andTelecommunications, Monitor Deloitte

Going forward, it will be crucial forgovernments to invest in building theircapabilities around Big Data if they want to achieve tangible results fromtheir Big Data strategy

Technology

cyber security - deloitte united states...mining a national resource cyber security ... 2009 norway...

Documents