Sept 24 NISO Virtual Conference: Library Data in the Cloud

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Doing things differently:
Security and Data Ownership
in the Cloud
Andrew K. Pace
Executive Director, Networked Librar...

Agenda
• Data Ownership in the Cloud
• What to look for in Terms & Conditions
• The Metadata irony
• The shifting role...

Some thanks to my colleagues
Matthew Cull
Senior Attorney & Privacy Officer, OCLC
Bill Lisse
Corporate Security Office...

Setting some
context
The world’s libraries. Connected.

“Libraries have
a tremendous stake
in what happens among organizations that develop
and support their strategic technol...

Welcome to the Cloud
Shared
Data
The world’s libraries. Connected.
Consumer
Shared
Infrastructure
Business

The cloud environment
The world’s libraries. Connected.
SaaS
PaaS
IaaS

Privacy
The world’s libraries. Connected.
Shared data Security
models
Interoperability
LIBRARIANS: WE ARE THE GOLD ST...

MOST LIBRARIES ARE NOT AS GOOD AT THIS AS THEY
The world’s libraries. Connected.
Security Risk
Assessments and Audits
...

Data Ownership:
the macro and the micro
The world’s libraries. Connected.

My happy career choice
SOFTWARE
The world’s libraries. Connected.
vs
CONTENT AND ASSETS

Data Ownership in the Cloud
• Data Ownership: an OCLC perspective
• The Metadata irony
• The shifting role of “data” an...

Data Ownership at OCLC
http://oclc.org/worldcat/community/record-use/policy.en.html
The world’s libraries. Connected.

Terms & Conditions Matter in the Cloud !!!
Excerpts from
WORLDSHARE MANAGEMENT SERVICES TERMS AND CONDITIONS
3.1 Owners...

Terms & Conditions Matter in the Cloud !!!
3.2 License Rights to OCLC. Institution hereby grants OCLC a worldwide, non-ex...

Other things to look for in Ts&Cs
Data Disclosure & Security
• Data Security
• Data Transfer
• Nondisclosure of Patron...

The Metadata Irony
• Our users have moved to the cloud
• Huge portions of our collections have moved to the cloud
• Our...

The Metadata Irony
• Our users have moved to the cloud
• Huge portions of our collections have moved to the cloud
• Our...

Thinking about the future of data ownership in the cloud
"Trying to hold on to unused
publications that libraries no lon...

“…about the contents of catalogue records…”
• Linked Data
• What changes when we’re talking about a web of
linked data ...

Implications:
Entities and library workflows
Cataloging
Improve data quality
• Cascading updates
A new approach to ca...

Entities and library workflows
Discovery
The world’s libraries. Connected.
Knowledge cards
• Fixes problem of
“repres...

Shirky Principle
“Institutions will try to preserve the
problem to which they are the
solution.”
Does this apply to th...

OCLC, Security
(& privacy)
The world’s libraries. Connected.

The world’s libraries. Connected.
“Share”

Libraries are all about sharing
Shared:
Infrastructures
Platforms
Software
Data
What about
security?
The world’s l...

Cloud concerns?
The principal concern for cloud adoption is security and
privacy; questions include
• Where does my dat...

OCLC has chosen to address all of these areas in it’s ISO/IEC
27001 certified Information Security Management System
The...

The cloud security imperative
Gartner Research Group: Seven cloud-computing security risks
• Long-term viability [Govern...

Governance
Need to set “tone at the top” through…
• an executive-level Global Security & Privacy Governance
Committee, ...

Regulatory Compliance
ISO/IEC 27001 has reciprocity with international privacy laws, including:
• European Union Data Di...

Data Location: Legal and Political Realities
CAN 1
US2 EMEA 1
US1
The world’s libraries. Connected.
APAC 1

Identity management,
security & privacy
The world’s libraries. Connected.

Identity management principles
• A single set of credentials reduces username and passwords
required to access services....

OCLC’s approach to Identity Management Services
Standards and interoperability
• SAML V2 Based Messaging
• Shibboleth C...

OCLC Identity Management Services - Controls
Role Based Access Control (RBAC)
A popular approach used by many operating ...

Source: http://iangotts.wordpress.com/2012/09/26/
standing-in-the-fire-hose-of-data-drowning-or-refreshing-tucon2012-bigd...

pacea@oclc.org
Explore. Share. Magnify.
The world’s libraries. Connected.
Thank You!
Andrew K. Pace
@andrewkpace

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

Sept 24 NISO Virtual Conference: Li... by National Informat... 1301 views
Sept 24 NISO Virtual Conference: Li... by National Informat... 1092 views
Sept 24 NISO Virtual Conference: Li... by National Informat... 1353 views
Sept 24 NISO Virtual Conference: Li... by National Informat... 944 views
Sept 24 NISO Virtual Conference: Li... by National Informat... 991 views
Sept 24 NISO Virtual Conference: Li... by National Informat... 1752 views

View on Slideshare

1 of 39 Ad

View on Slideshare

1 of 39 Ad