Presentation at Privacy Forum: The Future of Privacy, 5 May 2010, Wellington New Zealand

1. Cloud computing and privacy
- developing some strategies
- a government perspective
CROWN COPYRIGHT ©
Clifton Chan
21 May 2010

2. What is cloud computing?

3. Undefinition
“The network is the computer”
-- John Gage, Sun Microsystems, 1982
“... computing may someday be
organized as a public utility ...”
-- John McCarthy, 1961

4. Definition
“a computing capability that provides an
abstraction between the computing
resource and its underlying technical
architecture (e.g., servers, storage,
networks), enabling convenient, on-
demand network access to a shared pool
of configurable computing resources that
can be rapidly provisioned and released
with minimal management effort or
service provider interaction.” -- NIST

5. Characteristics
 On-demand self-service
 Broad network access
 Resource pooling
 Rapid elasticity
 Measured service
-- NIST

6. Services
 Software as a Service
 Platform as a Service
 Infrastructure as a Service
 “Stack” of services

7. Types
 Public clouds
 Community clouds
 Private clouds
 Hybrid clouds

8. Potential Benefits
 Fast deployment – low entry barriers
• Self provisioning/de-provisioning
• Pay for what you use
 Minimum/no capital
• No large capital investment
 Quality/value-for-money
• Access large economies of scale
• Access sustainable centres of practice
• Access better services

9. Paradigm
It is a form of outsourcing.

10. Why the fuss?
We outsource all sorts of things, e.g.:
 Mainframe bureaus
 Payroll bureaus
 Watering plants
 Office cleaning
 Helpdesks

11. Fuss:
 Data is likely to be overseas
• Outside your organisation
• Outside NZ jurisdiction
 Multi-tenant
• 100’s – 1000’s of organisations
• 1,000,000’s of users
 The network is often the Internet

12. Accountability
When you outsource you are still
legally accountable

13. Strategies

14. Outsourcing
 Risks and costs vs benefits
 Privacy is a risk
• Different profile with cloud computing
 Are you ready for outsourcing?

15. Privacy
 Privacy Impact Assessment
 Classify and value your data
 Status of data
 NZ law / NZ provider
 Align cloud type to risks/data-value
 Favourable terms of Exit
 Monitor usage / contract
 Stay informed

16. Questions
CROWN COPYRIGHT ©