With my team (LKYSPP MPA), we presented the basic concept, advantages, case studies, and risk management of "Cloud Computing" to (potential) policy makers, in the framework of our "Governance Study Project". We'd like to help those policy makers to make their informed decision on integrating tech-solutions in their governance, business community, and the general public.

1. Cloud Computing
Governance Study Project
Presented by:
Galay Rabten, Faizah,
Jaclyn Fong, Jenny Jenish kyzy
03.09.2019

3. What is "cloud computing"?
The storing of data and applications on remote servers,
and accessing them via the Internet rather than saving or
installing them on your personal or office computer.
*Reference: LKYSPP & Microsoft, (2017), A Cloud for Doing Good: A Technology Revolution for All in ASEAN, retrieved
from https://news.microsoft.com/en-ph/2017/10/16/cloud-computing-grow-asean-ph-cloud-grow-security-data-privacy/

4. Advantages of cloud computing:
Reduce IT costs on
investment for servers,
maintenance, and
replacements
Users pay only for
what they use.
Unlimited
computing
power
Reduces
business & technical
risks
Flexibility for greater
collaboration with teams
Protects users
from loss of
data
Employees can
work
from anywhere at
any time
Scale up or down
depending
on computing needs

5. Four models of cloud
Reference: https://www.i2k2.com/blog/three-basic-cloud-computing-infrastructure-models/

6. Who uses cloud computing
Central governments, Cities, Businesses (esp. SME),
Manufacturing, Banks and Financial services firms, Health
and Education institutes, and Social service organizations,
etc.

7. EVERYONE
Uses Cloud
Computing

8. Taking steps to adopt cloud
computing
Non-critical services: e.g. bus services, parking
Barrierstoentry
Whole-of-Government services
Major Government services: e.g. Tax, HealthcareAdopting
cloud
computing

9. Content Websites Platform (CWP) launched in
Oct 2016
Provides a suite of standardised software for
hosting content-based websites.
Unclassified government websites are centrally
managed and operated in the public cloud.
Hosting environment
Hosted in the Public Cloud, Amazon Web Services
(AWS), and G-Cloud, IM8 Compliant Hosting
Environment, for ‘unclassified’ front-end website and
‘restricted’ form services respectively.
Singapore
Common hosting
platform for government
websites

10. Key Benefits to the Government
Singapore
Common hosting
platform for government
websites
Cost and Time savings
Agencies only work with one vendor for their respective websites
instead of multiple ones in the past
Flexibility to scale up and down as need arises
During peak periods, additional capacity is automatically
provided to cater to surges in traffic
No downtime for security fixes
Security patching can be done in minutes, instead of hours

11. Singapore
Parking.sg
Cloud based parking app
that allows users to pay for
parking remotely, without
the use of paper coupons

12. Key Benefits to the Government
Lower cost compared to alternative
models
$1.96m to develop and maintain over 4
years
Singapore
Parking.sg

13. India
Healthcare services in rural India
To address the healthcare infrastructure gap in rural and areas
Remote Medical Diagnostics is a low-cost digital health
solution, which facilitates technicians to act as a proxy
for doctors in rural areas.
How is it done?
- Vital signs and checks taken stored in cloud repository;
actual diagnosis done by offsite doctors
- Provide real time consultations for patients located in
rural areas and remotely located physicians.

14.  Benefits to patients​
 Saves time and money for patients; less likely to delay
care​.
 Benefits to operator​
 Operate with low cost & operations - bandwidth,
infrastructure, skillsets
 Easy access to health care via smart phones, laptops, tabs
 Opportunities​
 Study health trends can help detect early signs of certain
ailments and potentially lifesaving care
 Global healthcare cloud computing market expected to
grow, exceeding USD 15.5 billion by 2024 (ETCIO, Mar
2019)
India
Healthcare services in rural India

15. Since 2009, when the national tourism website visitEstonia. com was placed
in the Amazon cloud.
Every citizen's medical data in the cloud, kept secure by blockchain technology
and readily accessible for the individual and their care providers
Estonia
Estonia’s cloud journey
Examples of cloud services

16. Intends to integrate the existing siloed IT infrastructure of the Estonian public sector into shared pool of
resources.
Estonian Government Cloud will be deployed in two locations, with one location within the country, and one
outside of the capital to manage risk (currently Luxembourg)
Private-public partnership – a consortium consisting of State Infocommunication Foundation (RIKS), a non-
commercial foundation launched in 2000 and administrated by the Ministry of Economic Affairs and
Communications, and private companies such as Cybernetica, DELL EMC, Ericsson, OpenNode and Telia
Estonia
Estonian Government Cloud

17. Key Benefits
Cost and Time savings
Shared pool of resources across agencies
Agility in provision of E-services to the public
+
Estonia
Estonian Government Cloud

18. Risks & Challenges to Cloud
Computing
Cyber
attacks &
espionage
Access to data
Inter-
operatability
Standards and
governance
Displacement
of lower-skilled
workers

19. Bangladesh Bank Cyber
Heist Hackers siphoned off nearly $1 billion
• Transfers made to Philippines & Sri Lanka
 Findings
• No firewall, lack of sophisticated switches
• Malware compromised the server software used to interface with
SWIFT’s messaging platform
• Lapses in security processes from bank and partners
 Lessons learnt
• Banks to ensure security controls in their local environment
• Cyber security a shared responsibility
• Update and review processes and security procedures
• Educate and train staff about protocols

20.  Support from government
Advisory role in collaborations between government,
businesses, and universities
Operational structure : National Cybersecurity Authority
(NCSA) – operations & Israel National Cyber Bureau(INCB) -
policies
Israel makes cybersecurity a
priority
 Military as incubator for cyber security startups
IDF 8200 Unit as a training ground for some of the top
cybersecurity companies in the world
Recruits are individuals with strong language and computer
skills when they enter the armed forces at the age of 18.
Face real-life challenges and employ leading-edge solutions to
these problems

21.  Interdisciplinary approach to cybersecurity and diversity
Seeing things from different angles and breaking through
artificial boundaries.
Complex issue of technology & its relation with other spaces
Israel makes cybersecurity a
priority
 Invest in human capital
Offers cybersecurity, as elective in high school and PhD-level
Universities undergraduate specialization in cybersecurity
 Unique approach
Proactive & comprehensive, long-term strategy, focused on
threats and organisations
Strategy has 3 levels: Robustness, resilience, and defense

22. Why should you start on cloud
computing?
Low barriers to entry for piloting cloud computing
use, with many advantages:
- Cost, time savings
- Flexibility to scale up or down
- Unlimited computing power
- Reduce need for expensive infrastructure
Many risk mitigation strategies are available,
depending on your needs:
- use of robust firewalls & network security
- maintain regular software updates
- shared responsibility model between users & suppliers

23. POLICY
RECOMMENDATION

24. Policy Recommendation
 Define ICT as a major strategic driver of development; Establish a
committee to strategize the promotion of ICT and cloud deployment;
Foster competition among ICT service providers by liberalizing markets
and reducing barriers to entry; Engage leading global tech companies to
participate in the country’s digital ecosystem; Develop a
bigger technologically literate human capital base to improve the quality
of the labor pool.
 Encourage Investment on Cloud Computing.
 International Standardization: Gov and cloud service providers should
comply with international standards such as Iso 22301 for business
continuity management, ISO/IEC 27001 for information security
management, and ISO/IEC 27018 for data privacy in the cloud.

25. Policy Recommendation
 Define ICT as a major strategic driver of development; Establish a
committee to strategize the promotion of ICT and cloud deployment;
Foster competition among ICT service providers by liberalizing markets
and reducing barriers to entry; Engage leading global tech companies to
participate in the country’s digital ecosystem; Develop a
bigger technologically literate human capital base to improve the quality
of the labor pool.
 Encourage Investment on Cloud Computing.
 International Standardization: Gov and cloud service providers should
comply with international standards such as Iso 22301 for business
continuity management, ISO/IEC 27001 for information security
management, and ISO/IEC 27018 for data privacy in the cloud.

26. Policy Recommendation
 Define ICT as a major strategic driver of development; Establish a
committee to strategize the promotion of ICT and cloud deployment;
Foster competition among ICT service providers by liberalizing markets
and reducing barriers to entry; Engage leading global tech companies to
participate in the country’s digital ecosystem; Develop a
bigger technologically literate human capital base to improve the quality
of the labor pool.
 Encourage Investment on Cloud Computing.
 International Standardization: Gov and cloud service providers should
comply with international standards such as Iso 22301 for business
continuity management, ISO/IEC 27001 for information security
management, and ISO/IEC 27018 for data privacy in the cloud.

27.  The adoption of data privacy regulations has raised concerns about rigid
regulations. These concerns could be addressed by adopting data
classification protocols like those of the UK and Australia.
 Awareness raising and rollout of best practices in Cybersecurity.
 Gov should include the development of broadband fiber rollout -
broadband infrastructure as a flagship project under its
infrastructure program.
 Gov should work closely with all stakeholders to effectively address major
obstacles to cloud computing adoption, including the high rate of software
piracy and concerns about security and privacy.
 Create regulatory sandboxes for policy experimentation.
 Establish unconventional partnerships to co-innovate on challenges like
the skill gap.
Policy Recommendation

28.  The adoption of data privacy regulations has raised concerns about rigid
regulations. These concerns could be addressed by adopting data
classification protocols like those of the UK and Australia.
 Awareness raising and rollout of best practices in Cybersecurity.
 Gov should include the development of broadband fiber rollout -
broadband infrastructure as a flagship project under its
infrastructure program.
 Gov should work closely with all stakeholders to effectively address major
obstacles to cloud computing adoption, including the high rate of software
piracy and concerns about security and privacy.
 Create regulatory sandboxes for policy experimentation.
 Establish unconventional partnerships to co-innovate on challenges like
the skill gap.
Policy Recommendation

29.  The adoption of data privacy regulations has raised concerns about rigid
regulations. These concerns could be addressed by adopting data
classification protocols like those of the UK and Australia.
 Awareness raising and rollout of best practices in Cybersecurity.
 Gov should include the development of broadband fiber rollout -
broadband infrastructure as a flagship project under its
infrastructure program.
 Gov should work closely with all stakeholders to effectively address major
obstacles to cloud computing adoption, including the high rate of software
piracy and concerns about security and privacy.
 Create regulatory sandboxes for policy experimentation.
 Establish unconventional partnerships to co-innovate on challenges like
the skill gap.
Policy Recommendation

30.  The adoption of data privacy regulations has raised concerns about rigid
regulations. These concerns could be addressed by adopting data
classification protocols like those of the UK and Australia.
 Awareness raising and rollout of best practices in Cybersecurity.
 Gov should include the development of broadband fiber rollout -
broadband infrastructure as a flagship project under its
infrastructure program.
 Gov should work closely with all stakeholders to effectively address major
obstacles to cloud computing adoption, including the high rate of software
piracy and concerns about security and privacy.
 Create regulatory sandboxes for policy experimentation.
 Establish unconventional partnerships to co-innovate on challenges like
the skill gap.
Policy Recommendation

31. Policy Recommendation
 STRATEGY
 TECHNOLOGIES
 REGULATIONS
 PARTNERSHIP

32. Further
References
(forPolicyMakers): Link: https://www.youtube.com/watch?v=AuF8SE7zqk8
 SIIA (2011), "Guide to Cloud Computing for Policy Makers",
https://nusu.sharepoint.com/sites/GSPCloudComputing/Shared%20Documents/Reading%20materials/policy_cloud_2011%20(2).pdf
 LKYSPP & Microsoft, (2017), A Cloud for Doing Good: A Technology
Revolution for All in ASEAN, retrieved from https://news.microsoft.com/en-
ph/2017/10/16/cloud-computing-grow-asean-ph-cloud-grow-security-data-privacy/
 The Economist, (2016), "Ascending Cloud: the adoption of Cloud Computing
in five industries", retrieved
from https://eiuperspectives.economist.com/sites/default/files/EIU_AscendingcloudMBP_PDF_1.pdf

33. References:
• https://www.forbes.com/sites/suparnadutt/2016/11/21/indias-most-remote-villages-are-getting-better-
healthcare-with-this-cloud-based-solution/#5282e6cf593b
• https://neurosynaptic.com/remedi-telemedicine-solution/
• https://cio.economictimes.indiatimes.com/news/cloud-computing/7-ways-how-cloud-computing-is-
shaping-healthcare-in-2019/68614849
• https://eiuperspectives.economist.com/sites/default/files/EIU_AscendingcloudMBP_PDF_1.pdf
• https://www.bankinfosecurity.com/bangladesh-bank-heist-lessons-learned-a-9064
• https://www.forbes.com/sites/gilpress/2017/07/18/6-reasons-israel-became-a-cybersecurity-
powerhouse-leading-the-82-billion-industry/#6093fe76420a
• https://www.opengovasia.com/an-in-depth-look-at-govtechs-new-common-hosting-platform-for-
singapore-government-websites/
• https://www.designsystem.gov.sg/onboarding/extensions/cwp/
• https://www.xtremax.com/works/case-study/content-website-platform
• https://www.designsystem.gov.sg/about/

34. Thanks for
your
attention!