head c4dlab universityofnairobi dr tonny omwansa cloud infrastructure connectedea 2015-01!04!15

8/9/2019 Head C4DLab UniversityofNairobi Dr Tonny Omwansa Cloud Infrastructure ConnectedEA 2015-01!04!15

http://slidepdf.com/reader/full/head-c4dlab-universityofnairobi-dr-tonny-omwansa-cloud-infrastructure-connectedea 1/49

Towards a National Cloud Strategyfor Kenya

Connected East Africa 2015

Tonny K. Omwansa !"#

$tomwansa

%ocus on !u&lic Sector



• Two Cloud Adoption Surveys

• Draft Cloud Strategy

• Way forward

O'er'iew



201( Cloud Study



Cloud Strategy Topics

•#eterminants of cloud com)uting*• Factors that aect cloud related performance and

its outcomes/impacts•

Characteristics: elia!ility" Agility" #sa!ility"Sustaina!ility etc• $olicy and legal framewor%s" &ar%et" Standards etc"

•Strategies or actions of Cloud Com)uting

actors*• 'nstrumental in delivering the outcomes/impacts of

the cloud• Costing" $romotion" Training etc"

•Outcomes+,m)acts of Cloud Com)uting

*+,- Cloud Survey . Design

#eterminants

OutcomesStrategies




• Timelines: une *+,- 0 April *+,1

• 2uantitative 34+ institutions5 and 2ualitative

3,* in depth interviews5

•6aseline report availa!le athttp://www"c1dla!"ac"%e/wp0content/uploads/*+

,1/+1/CC0study0report0April0*+,1"pdf

*+,- Cloud Survey . 7utput

http://www.c4dlab.ac.ke/wp-content/uploads/2014/04/CC-study-report-April-2014.pdf







• 8overnance9 egal and regulatoryframewor%s

• Standards

• Con;ict resolution

• Safe/Fair Contract Terms/Conditions

• icensing• ocation of Data

• Cross !order and territorial issues

• S%ills < Awareness

• )ncouraging adoption

• =endor loc%ing• &ar%et Characteristics 3competitive

landscape/ maturity5

• >etwor% infrastructure9 applicationand data readiness

• 8overnment readiness and role

• Service evel Agreements

• $orta!ility of applications

• 'ntegration with legacyenvironment

• $u!lic Cloud $rocurement8uidance

• Culture change

• Alignment to governmentstrategies

• What services should go to thepu!lic/community cloud

3Decision Framewor% for Cloud&igration5

• Security re?uirements 3Statutorycompliance to laws9 regulations9agency re?uirements@ Datacharacteristics@ $rivacy and

condentiality@ 'ntegrity 0authoriBed9 complete9 and

*+,- Cloud Survey .)merging topics



," Adoption of cloud computing in enya is fairly recent"&ost organiBations adopted a form of cloud serviceeither *+,+/,,"

*" &ore organiBations utiliBed pure private cloud 3-E5compared to utiliBing a pu!lic cloud 3**5"

-" The %ey !arrier: – Additional cost of investment

– Technical s%ills 3security9 architecture and design9 storage

and virtualiBation5 – $erceived relia!ility of service9 security and privacy of data

– 8eographical location

1" ac% of %nowledge of policy/legal framewor%s for

cloud 3G+5 – Those aware: Hits not ;ei!le9 comprehensive and eectiveI

*+,- Cloud Survey 0 eyFindings



4" Cloud services mar%et was ready 3E+5" – eading consumers: nancial sector9 telecommunications

L" 6enets of cloud were consistent with literature: – cost savings in hardware9 software and personnel9

– improved system performance and management9

– ;ei!ility in access to processing and storage capacity

– higher elasticity degree

– etc

*+,- Cloud Survey 0 eyFindings



," A national cloud readiness survey to inform cloudstrategy

*" Developing a national cloud strategy

-" 8overnment to champion utiliBation of cloudservices

1" )nhancement of relevant legal/regulatoryframewor%s – protection of cloud service users

– cy!er security challenges

– guaranteeing secure online payments

– privacy and data security

– etc

J" Development of the human resource capacity–

*+,- Cloud Survey 0ecommendations



201-+15 Cloud Study



," An in0depth study9 focused on pu!lic sector

*" Target consumer: 'CT Authority

-" Anchored on 'CT &asterplan1" 7!Kective: developing a Cloud strategy

J" 6ased on a SW7T analysis

4" Data collected: une *+,1 to Fe!ruary *+,J

L" 1J in0depth interviews 3suppliers9 &DACs9 pu!lic9opinion shapers5

*+,1/J Cloud Survey 06ac%ground



*+,1/J Cloud Survey 0Framewor%



Findings 0 Situational analysis

Strengt"s

• eaders"i) 0 >ational leadership understands andchampions technology

• aunc"ed )ro/ects . Several e0gov services amena!lefor the cloud

• egal+regulatory en'ironment . $rogressive 3variouspolicy documents5

•

ocal ,nfrastructure ca)a&ilities 0 Migh ?ualitynetwor%s9 Some good DCs

• ,nstitutional esta&lis"ments . egulatory andsupervisory eist

• !olicy documents 0 A num!er of policies have !eendevelo ed e" " 'CT olic >ational c !ersecurit lan 'CT




eanesses

• o'ernance and c"ange management 0 Wea% humancapital9 traditional mindset9 resistance to change

• Ser'ice ac3uisition 4 funding . SAs9 funding mechanism

and procurement laws arenNt all aligned to ac?uisition andmanagement of cloud

• A'aila&ility and relia&ility 0 >etwor% Dependence at CriticalMours 0 $rovision of relia!le access9 round0the0cloc% support9security levels9 high internet speeds are paramount issues that

need to !e addressed"• ,nformation assurance and data security 0 Assurance of

privacy and condentiality of data and information in the cloudare %ey issues that the 8overnment must consider during cloudoering9 as they are very sensitive"

•

egal and regulatory issues 0 There are perceived gaps in thelegal and policy framewor%s surrounding cloud computing9 as




O))ortunities

• o'ernance 0 educed costs9 improved access and servicedelivery"

• Accessi&ility 4 relia&ility 0 )ase of use of access9 improved

productivity

• ig"er 6e7i&ility 4 scala&ility 0 Dynamic and rapid scale ofcapacity"

•

aws 4 )olicies 0 $roviders adherence to national <international laws /policies

• 8ariety 0 'mproved !argaining power of 8ov 3a!ility to procurefrom wide variety of providers9 local providers and international5

• !ricing 0 Favora!le pricing models depending on client needs"




T"reats

• o'ernance 0 $ossi!le 'T sta reduction9 internal resistance tochange and wor%ing practice9 long !ureaucratic procurementprocess9 trust9 funding"

•

ac of control 0 Control is transferred to the cloud provider"• Security and )ri'acy concerns 0 Data privacy9 data

protection9 loss of control over data9 target to eternal attac%s9potential malicious insider activity"

• ,ntero)era&ility 0 'ntegration with in house systems"

• egal and regulatory en'ironment 0 ac% of specicstandard regulation on data protection9 user privacy issues9SAs etc

• Tec"nology+,nfrastructure sills and awareness 0#npredicta!le performance9 lac% of sensitiBation and

awareness of cloud services !eing oered9 lac% of technologicaland human capa!ility9 relia!ility of power supply9 lac% of high



#raft Cloud Strategy



=ision

• The vision of the 'CT &aster $lan is: – Kenya as a regional ICT hub and a globally competitive

digital economy

– This vision can !e ta%en as the 8overnmentNs vision withrespect to 'CT"

• Cloud Strategy =ision – Delivering value of e-government services to

stakeholders by exploiting cloud computingservices

– =alue to 8overnment agency that outsources• e"g" reduced total costs of ownership and !etter service delivery

etc



Strategic 7!Kective

• The strategic o!Kective of the Shared Servicestheme of the ,CT Aut"ority Strategic !lan201(9201: is:

To facilitate ecient and eective delivery ofgovernment online services using a suitablecombination of private and public cloudcomputing oerings

• 7ne of the means of achieving this o!Kective is Ptodevelop and implement a public service cloudcomputing strategy N"



Desired State

• =any more s"ared commodity ser'ices andsolutions

A range of shared 'CT services and solutions availa!le on

the cloud so the government9 its agencies and related!odies can use what they need9 when they need it9 and notcreate duplicate services that cannot !e shared"

• Scala&ility and 6e7i&ility

The a!ility9 if re?uired9 for departments and agencies to

change infrastructure to t to their needs"



Desired State

• Com)etiti'e maret)lace

A range of service providers constantly improving the

?uality and value of the solutions they oer which the

government can ta%e advantage of"

• >eady and easy to use

Complete solutions that are already assured for security9

performance and service management



Desired State

• Cost e?ecti'eness

Cloud computing will !ring down the unit per cost of

consumed 'T service !ecause it reduces cost of electricity

consumption9 lower 'nfrastructural la!or cost of distri!ution9and provides relia!ility in the event of disaster and 6usinesscontinuity0 high availa!ility and relia!ility

•

ig" scala&ility of ,T in'estment

The cloud provides on0demand access to shared resources

that reduced upfront cost of 'T investments through turningthe ed capital ependiture in 'T into operative costsdepending !ased upon siBe of demand



Desired State

• =o&ility

'ncreased capacity to wor% from anywhere and from any

device"

• ,m)ro'ed go'ernance

8reater tracea!ility of government transactions andservices



8uiding $rincipals

• ,ncrease t"e s)eed with which 'CT services aredeployed

• #se of glo&al standards and &est )ractices to

provide high ?uality and consistency

• >educing waste !y avoiding duplication9!rea%ing down silos and promoting sharing of idleresources

• ,ncrease )ro/ect success rates !y sharing ofinformation and inter0agency colla!oration

• #se of o)en standards for data and architecture



8uiding $rincipals

• Cost consciousness !y reducing price governmentpays for assets !y increasing sharing < re0use of 'CTservices/solutions

• !romote 6e7i&ility9 con'enience and ease ofuse of government services !y citiBens

• Agility to help improve way government delivers

!usiness change

• En"ancing accounta&ility and trust !y clearlydening internal and provider responsi!ilities while!uilding trust into !usiness processes



Strategy Specics 0 SaaS

• 'CT Authority to design9 implement and manage 'CTinfrastructure to deliver software application servicesto &inistries9 Departments9 Agencies and theCounties regardless of their location"

• 6ac%end activities will !e managed from centrallocations in a one0to0many model"

• SaaS to have elements of $u!lic and $rivate

S S i S S



Strategy Specics . SaaS3pu!lic5

• Applications9 data or processes which are pu!lic0facing9 non0sensitive9 non0condential9 non0missioncritical or needing signicant future scala!ility to !econsidered for pu!lic cloud"

• espective implementing agencies should alsoconsider compliance and !udgetary re?uirements"

• )amples: – open data9 pu!lic information repositories9 analysis of non0

sensitive or non0condential data and front0end elements ofonline services or apps that do not store sensitive data"

St t S i S S



Strategy Specics . SaaS3private5

• Applications9 data or processes with characteristicsli%e: sensitive9 condential and mission criticalshould !e considered for private cloud"

• The implementing agency should also considercompliance re?uirements"

• )amples: – nancial systems9 procurement platforms9 M systems9

identity details9 medical records and nancial details"



Strategy Specics 0 'aaS

• 8overnment to esta!lish infrastructure that can !eshared and provided to other sta%eholders as aservice"

–

This infrastructure to !e accessi!le to other organiBationswithin gov on need !asis

• The 8overnment Core Connectivity >etwor% 38CC>59the >ational 7ptic Fi!re 6ac%!one 'nfrastructure

3>7F6'5 and County Connectivity 'nfrastructure 3CC'5represents the !asic infrastructure on which e0government services run"

– This infrastructure cannot !e outsourced given the privacy

and condentiality of some of the 8overnment data sets" –

St t S i ' S



Strategy Specics . 'aaSstrategies

eneral

• Consolidation of t"e 'arious connecti'ity)ro/ects into one integrated networ% that providesseamless connectivity

• >e'iew t"e design of t"e networ elementsand improve their scala!ility9 relia!ility9 security andcost

• Outsource certain elements of the networ%infrastructure in order to manage scala!ility9eectiveness and cost" e"g"9 construction ofinfrastructure9 maintenance and redundancy

• Consolidate t"e )rocurement and maintenance

St t S i ' S




eneral

• >e'iew t"e o)eration of NO%@, !y 7range givenits unaccepta!ly low ?uality of service9 intertwiningwith 7range infrastructure9 open access to ducts and

termination points"

• Consider providing infrastructure as a ser'ice tot"e County o'ernments and provide last mile

connecti'ity with appropriate technologies9 e"g"white spaces9 Wima9

• Develop and retain a core ,CT infrastructure

team that has the re?uisite s%ills to design9

St t S i ' S




Com)uting and storage

• @uild a networ of distri&uted o'ernment#ata Centers !ased on glo!al standards and !estpractice to ensure high availa!ility"

• =igrate all e7isting critical a))lications that arecurrently in gov o(ces to 8overnment owned andmanaged data centers

• Consolidate all o'ernment &udgets for #Cs inthe short to medium term in order to consolidate andreduce costs" – !egin with a survey to identify who in 8overnment has DC

St t S i ' S




Com)uting and storage

• ,ntroduce a commercialiation model 3e"g"sharing space and services5 in 8DCs to guaranteesustaina!ility

• &ar%et to critical anc"or tenants who can use thegovernment cloud infrastructure as a service e"g"A9 C69 $C

• For all 8DCs9 outsource all non9core elements9especially power and !ac%up systems9 cooling andM=AC to local ?ualied companies"

• @uild ca)acity in 8overnment for data centrepersonnel

St t S i ' S




#isaster reco'ery and &usiness continuity

• For mission critical applications high availa!ilitymust !e guaranteed" 't is therefore necessary to runthe applications in active0active mode in two data

centres

• For non9mission critical applications9 an active0passive approach across two data centres !ut with

clear restore targets is recommended

• For disaster reco'ery9 primary and secondary sitesshould !e separated !y a minimum distance as per

glo!al !est practice



Strategy Specics 0 $aaS

• $aaS ena!les government to provide tools ondemand that ena!le su!scri!ers to develop newapplications or services" The cloud !ased applicationdevelopment tools also ena!le testing9 deployment9

colla!oration9 hosting and maintenance ofdeveloped solutions"

• )amples of platforms that can !e deployed as a

service include Content &anagement Systems3C&S59 Spatial Data 'nfrastructure 3SD'59 DataWarehouses and 7pen Data platforms"

//&ore wor% to !e done on $aaS

St t ' l t ti



Strategy 'mplementation .ey issues

," $olicy ecommendations

*" Strategic $roKects

-" Funding

1" StandardsJ" 8overnance Structure

4" Change &anagement

L" Critical Success FactorsG" is%s and &itigation Strategies

E" &onitoring and )valuation

Strateg 'mplementation




!olicy >ecommendations• Consolidation of networ% infrastructure and DC

!udgets in &DAs

•

Consolidation of mission critical applications hostedin high availa!ility environment and in DCs designedto glo!al standards

• >o development and deployment of silo systems 0 The systems developed or procured !y &DAs should: – !e generic

– !e standards0!ased

– share infrastructure9 including storage9 networ% lin%s andinformation without duplication

–

!e integrated with other systems according to a guideline3operation manual5 to !e developed !y 'CTA

Strategy 'mplementation




Strategic !ro/ectsCategory !ro/ect Timeframe

8DCs #pgrade 8DC uara%a 4 months

'mplement a containeriBed DC ,* months

Complete >aivasha DC ,G months

6uild a Tier 1 DC *0- years

6uild other DCs to achieve distri!uted networ% of DCs Q - years

>etwor% 'nfrst Complete >7C to manage infrastructure 4 months

e0design 8CC> and on0!oard %ey clients 4 months

Fast0trac% >7F6' phase * implementation *1 months

Fast0trac% CC$ phase * and ensure all %ey county o(ces areconnected

,J months

Applications 'mplement 8overnment )nterprise Architecture to facilitateintegration

4 months

&igrate applications designated for pu!lic cloud ,* months





%unding Sources• o'ernment

The >ational 8overnment will consolidate all 'CT

!udgets in &Ds in the line &inistry 3&o'CT5"

• Agencies and County o'ernments

ACs to fund specic aspects of cloud computing in

consultation with the 'CT Authority and pay for someof the shared services that they need and areavaila!le in a 8overnment private cloud"





%unding Sources• !ri'ate Sector

Development of suita!le incentives and ta !rea%s

to private sector !oth within and outside the 'CTsector to fund some of the cloud computing proKects" – 'ncentives may include: Development of Special $urpose

=ehicles/$rivate Sector Consortiums and waivers on certainlevies9 licensing fees9 ta incentives and ta !rea%s"

• #e'elo)ment !artnersenya will @leverage on her funding priorities whenapproaching development partners 3!i0lateral9 multi0lateral or other development partners5 who have 'CT

at the top of their support priority lists to fund some





Standards

8lo!al standards eist such as – 'S7/')C TC ,/SC -G 3standardiBation of Cloud Computing

and Distri!uted $latforms5

– 'S7 *L+,G:*+,1 3code of practice revolving around theprotection of $ersonally 'dentia!le 'nformation 3$''5 inpu!lic clouds5

– C76'T 3governance and management !y !ridging the gap!etween control re?uirements9 technical issues and

!usiness ris%s5 – 'CTA has !een wor%ing on a set of guiding standards

• The enyan 8overnment should therefore ensurethat it adopts glo!al practices prior to the adoption

and development of cloud services"





o'ernance Structure• 8overnance structure in >ational 'CT &aster $lan

shall !e used

•

Strengthening needed particularly on: – Who ma%es decision on adding cloud services and how willit !e funded@

– Mow 'T resources are allocated and scheduled@

– Who will !e responsi!le for managing the cloud service

provider and how cloud services !e managed andcontrolled"

• Cloud governance structures for consideration andcustomiBation: – The #S Federal Cloud Computing 'nitiative 8overnance

Structure





C"ange =anagement• Some areas needing management:

• C"anges to organiational )rocesses* – Sta should !e prepared" Changes in the processes

aecting many aspects li%e daily operations9 roles andresponsi!ilities"

• Stae"older engagement* – A sta%eholder engagement plan" Actively %eep sta%eholders

updated"• Training*

– 'ncluding !ut not limited to legal9 technical9 !usinessanalysis9 systems architecture9 change management9vendor management and governance"

• Awareness*





Critical Success %actors B Se'en ey

," Developing a competent support team in 8ov for CC

*" 7perationaliBation of the 8overnance Structure in

the >ational 'CT &aster $lan 3Ca!inet SteeringCommittee Chaired !y M) the $resident5

-" &anaging change within gov and general pu!lic

1" egal/regulatory framewor%s to encourage <

support CC adoptionJ" Availa!le and relia!le 8overnment 'CT infrastructure

4" Funding9 especially for scaling and recurrentependiture

L" Active engagement and participation of County





>iss and =itigation Strategies

>iss =itigation Strategies

, esistance to change 'mplement a change managementprogram with %ey elementsmentioned a!ove

* 'nappropriateprocurement legislation

Amendment of the procurementlegislation to allow forprocurement and scaling of cloudservices

- 'nsu(cient or inade?uatelegal and regulatoryenvironment

Strengthen the legal andregulatory environment to supportthe new paradigm

1 ac% of funding to support

new set ups andadditional costs of utiliBin

Consolidation of cloud focused

!udgets !y dierent &DAs







J $oor ?uality services9

including unavaila!ility ofservices due to threatsli%e cy!er attac%s9distri!uted denial ofservice attac%s andsystem failures9 loss of

data security andprotection !ecause of theo0premise characteristicsof third party providers9etc"

● $rofessional due diligence of

service providers● )sta!lishment and enforcement

of comprehensive contractualagreements with relevantconse?uences of lia!ilities

● )nforce strict SAs and monitor

them closely● Clustering9 replication and

disaster recovery solutions toachieve the necessaryrelia!ility"







4 oss of privacy and dataassurance due to aspectsli%e !reaches9 access9ownership and storagelocation

● )sta!lishment and enforcement ofcomprehensive contractualagreements with relevantconse?uences of lia!ilities

● Standards enforcement and auditcontrols measures

● $rivacy and security laws

enforcement● For pu!lic cloud9 ensure

understanding of applica!le laws"● Appropriate eit strategies

L ac% of pricing clarity in

variety of costs

Transparent contractual agreements

drafted and managed !y ?ualied





=onitoring and E'aluation

• &<) of performance shall !e the responsi!ility theShared Services Director at 'CT Authority"

• This Director will monitor the implementation of thestrategy on a ?uarterly !asis and report to the 'CTAuthority C)79 the 'CTA 6oard and other relevantunits in 8overnment"



>et stepsR

Sta%eholder engagements

evisions

Adoption

tomwansa

head c4dlab universityofnairobi dr tonny omwansa cloud infrastructure connectedea 2015-01!04!15

Documents