NIST US Government Cloud Computing Technology Roadmap, Release 1.0 (Draft)
November 2011
This document, Volume II of the Special Publication, focuses on work that helped to identify the USG high-priority interoperability, portability, and security requirements which are introduced in Volume I and summarizes work in the following areas:
Introduction of an overall cloud computing conceptual model in the form of the NIST Cloud Computing Reference Architecture and Taxonomy. This technical reference can be used to understand, discuss, categorize, and compare different cloud service offerings, and to facilitate the communication and analysis of the security, interoperability, and portability candidate standards and reference implementations. Presentation of a template and an initial set of USG target business and technical use cases that describe how government agencies seek to use cloud computing, and presentation of key, specific technical requirements that surfaced through these use cases. Identification of existing interoperability, portability, and security standards and guidance that are applicable to the cloud computing model, and identification of high-priority gaps for which new or revised standards, guidance, and technology need to be developed. Identification of the high-priority security requirements that challenge the adoption of cloud computing and presentation of proposed mitigation strategies. Discussion of considerations and activities related to cloud Service-Level Agreements (SLAs).
1.3
Intended Audience and Use
This publication is intended for a diverse audience:
1.4
US Policy Makers, US Federal CIO Council, and those with identified key roles identified in the Federal Cloud Computing Strategy – as a technology-oriented reference to inform policy and planning.
USG Agencies – as a useful tool in the context of the USG Federal Cloud Computing Strategy risk-based management decision framework.
Cloud Computing Stakeholders (Academia, Government, Industry, Standards Developing Organizations) – as a consolidated presentation of USG cloud computing technology perspectives and work, including a unifying cloud computing reference model, a set of documented technical requirements, and a list of identified gaps in standards, guidance, and technology. Document Organization
Consistent with the NIST Cloud Computing program strategy, the roadmap focuses on both strategic and tactical objectives related to cloud computing. The strategic roadmap elements can be characterized as “high-priority technical areas” which are enablers for cloud computing in both the short and long term. The tactical work not only supports strategic goals, but is intended to support cloud adopters in the interim deployment period as the cloud computing model is maturing. This initial release of the roadmap special publication consists of two volumes. Volume I is aimed at interested parties who wish to gain a general understanding and overview of the background, purpose, context, work, results, and next steps of the USG Cloud Computing Technology Roadmap initiative. Volume I reflects the collective inputs of USG agencies through the Federal CIO Council-sponsored Cloud Computing Standards and Technology Working Group.
Page 14