Federal Cloud Computing Initiative
               Cloud/Gov 2011 Conference

                Sanjeev “Sonny” Bhagowalia
               Deputy Associate Administrator,
Office of Citizen Services and Innovative Technologies, GSA

                    February 17, 2011
Federal Cloud Computing Strategy
                (Notional GSA View)




2/17/11               Cloud/Gov 2011         2
Federal Cloud Computing Initiative
                                       Major Program Activities
                                                                                     1. Apps.gov 2.0:
                                                                                        Online procurement of SaaS solutions for government.
                             8
                                                1
                                                                                     2. Info.apps.gov:
                            PaaS    Apps.gov                                            Informational website to communicate the latest news and
                                                                                        information regarding the FCCI.




                                                              Communications
                                                          2
          7                                                                          3. Federal Working Groups:
                  SaaS (Email)
                                            Info.apps.gov                               GSA has established several inter-agency working groups to develop
                                    CC
                                                                                        standards, set policies and agree to the overall vision for the FCCI.
                  Data Center
                  Consolidation
                                   PMO          Working
                                                Groups                               4. Infrastructure as a Service (IaaS):
              6                                           3                             The GSA has awarded a Blanket Purchase Agreement for IaaS. This
                                     IaaS                                               will serve as a foundation for Cloud Computing services within the
                         FedRAMP
                                     RFQ                                                Government.
                             5              4
                                                                                     5. FedRAMP:
                                                                                        Establish and operate a Government-wide Authorization Program
                                                                                        for performing security C&A and continuous monitoring for
                                                                                        commercial Cloud Services.
 7. Software-as-a-Service (SaaS) - Email:
    GSA CC PMO is leading the Cloud SaaS Email Working Group to                      6. Federal Data Center Consolidation Initiative (FDCCI):
    define and acquire SaaS Email services for Federal Government                       Completed the FDCCI Government-wide study; Supporting the
    through an RFI and RFQ process.                                                     Federal CIO Council in Managing the Government-wide data center
                                                                                        consolidation program including guidance, data collection and
 8. Platform-as-a-Service (PaaS) - Geospatial                                           assisting agencies develop and implement data center consolidation
    Working with government agencies in developing a geospatial                         plans.
    platform pilot for sharing data and developing applications for
    geospatial purposes.
U.S. General Services Administration
2/17/11                                                                        Cloud/Gov 2011                                                                   3
Federal Government Cloud Computing Potential




                                       Source: Federal Cloud Computing Strategy (http://www.cio.gov)

2/17/11                     Cloud/Gov 2011                                                             4
Economics are motivating the transformation


                                                                 Agencies will be required to complete
          New Budget Submission
                                         Beginning FY            alternative analyses that includes cloud
          Requirements                      2011                 computing alternatives as a part of their future
                                                                 budget submissions.



             By September         Alternative analyses for all newly planned or
                 2011             performing major IT investments.




                                  By September 2012: alternative analyses for all IT
             By September         investments, making enhancements to an existing
                 2012
                                  investment.




                                   By September 2013: alternatives
             By September
                 2013              analyses for all IT investments in
                                   steady-state.
                                                                    Source: FY2011 OMB Report on Information Technology

2/17/11                                         Cloud/Gov 2011                                                            5
GSA Cloud Computing PMO Overview
 Promoting adoption and removing obstacles in the government-wide acquisition and utilization
          of cost effective, green and sustainable Federal cloud computing solutions.




          Apps.gov      FedRAMP   Data Center       Infrastructure-   Software-as-a-   Platform-as-a-
                                  Consolidation      as-a-Service      Service Email       Service
                                   Initiative                                           (Geospatial
                                                                                            etc.)
                                     http://info.apps.gov


2/17/11                                    Cloud/Gov 2011                                               6
http://Apps.gov
                       Cloud Services available on http://apps.gov




          First Federal storefront site to commoditize cloud services so that buyers may
          cross-compare products and purchase (launched September, 2009). Currently
                              offering SaaS and social media products.
2/17/11                                       Cloud/Gov 2011                               7
http://info.apps.gov (All Things Gov’t Cloud!)


                                                                             News and
      Keeping you                                                            Information
      informed in                                                            on Cloud
      upcoming                                                               and Data
      events!                                                                Center
                                                                             Topics


      Reference                                                              Provides
      Documents                                                              tools to
      at your                                                                navigate the
      fingertips!                                                            cloud
                                                                             landscape


           Info.Apps.gov is a place where agencies can gather information about how
          Cloud Computing can help create sustainable, more cost-effective IT Services
                                   for the Federal Government


2/17/11                                     Cloud/Gov 2011                                  8
Infrastructure-as-a-Service (IaaS) BPA
                               BPA IaaS Services

          Storage            Virtual Machines       Server Hosting       • Blanket Purchase
                                                                           Agreement (BPA)
          • Online Web        • Online VMs /         • Online Server
            Based Storage       Computing              Hosting           • FISMA “Moderate”
          • Store Files &     • Multiple CPU &       • DNS and CDN         Level Security for
            Data Objects        OS Types               Capabilities
                                                                           Government
   On-demand Self Service
   Online, self service provisioning capabilities for services           • Services will be made
                                                                           available through
   Ubiquitous Network Access                                               purchase on apps.gov
   Accessible via the Internet with a sufficiently robust architecture

   Location Independent Resource Pooling                                 RFQ Required
   Massively scalable services, independent of location of resources
                                                                         Cloud Computing
   Rapid Elasticity                                                      Characteristics
   Scale up or down dynamically based on consumption and/or request

   Measured Service
   Utilization and consumption GUI dashboard and electronic interfaces




2/17/11                                             Cloud/Gov 2011                                 9
Infrastructure-as-a-Service (IaaS) Awardees
                      12 Awardees across 3 Lots:
                            • Cloud Storage
                          • Virtual Machines
                             • Web Hosting




2/17/11                        Cloud/Gov 2011           10
Software-as-a-Service (SaaS): Email

   • Inter-agency SaaS Email Working Group established in June 2010.

   • Developing an RFQ for a government-wide BPA of SaaS email solutions.

   • RFI completed.

          •   13 respondents.

          •   RFI responses will be leveraged to create RFQ requirements.

          •   Pre-solicitation day held November 1 to solicit vendor and government feedback.

          •   Email Procurement to be conducted early 2011.

   • GSA completed security authorization of Google Apps which may be
     leveraged by other agencies.

          •   USAID leveraged Google Apps security authorization package to greatly reduce
              timeline for system implementation

2/17/11                                      Cloud/Gov 2011
                                                   11                                           11
Federal Risk & Authorization Management Program
                                (FedRAMP)
  Unified Government-wide Risk Management Program           Problem: Independent agency risk
                                                            management has inefficiencies
  • Provides joint security authorization and continuous
                                                                       Federal Agencies
    monitoring
  • Agencies participate by leveraging the results for
    covered products
  • Agencies retain their responsibility and authority to
    ensure their security needs are met in the use of
    systems
                                                                        Cloud Providers
                                                            Solution: Unified risk management
  Vendor Benefits                                           eliminates inefficiencies
  • Government-wide authorization and security
    compliance cost reduction
  Agency Benefits
  • Cost savings through reduced duplication
  • Rapid acquisition
  • Increased security assurance
                                                                        Cloud Providers


2/17/11                                    Cloud/Gov 2011                                       12
Questions and Answers




          http://Apps.gov    http://info.apps.gov   http://www.cio.gov


2/17/11                           Cloud/Gov 2011                         13

GSA's Cloud Computing Efforts

  • 1.
    Federal Cloud ComputingInitiative Cloud/Gov 2011 Conference Sanjeev “Sonny” Bhagowalia Deputy Associate Administrator, Office of Citizen Services and Innovative Technologies, GSA February 17, 2011
  • 2.
    Federal Cloud ComputingStrategy (Notional GSA View) 2/17/11 Cloud/Gov 2011 2
  • 3.
    Federal Cloud ComputingInitiative Major Program Activities 1. Apps.gov 2.0: Online procurement of SaaS solutions for government. 8 1 2. Info.apps.gov: PaaS Apps.gov Informational website to communicate the latest news and information regarding the FCCI. Communications 2 7 3. Federal Working Groups: SaaS (Email) Info.apps.gov GSA has established several inter-agency working groups to develop CC standards, set policies and agree to the overall vision for the FCCI. Data Center Consolidation PMO Working Groups 4. Infrastructure as a Service (IaaS): 6 3 The GSA has awarded a Blanket Purchase Agreement for IaaS. This IaaS will serve as a foundation for Cloud Computing services within the FedRAMP RFQ Government. 5 4 5. FedRAMP: Establish and operate a Government-wide Authorization Program for performing security C&A and continuous monitoring for commercial Cloud Services. 7. Software-as-a-Service (SaaS) - Email: GSA CC PMO is leading the Cloud SaaS Email Working Group to 6. Federal Data Center Consolidation Initiative (FDCCI): define and acquire SaaS Email services for Federal Government Completed the FDCCI Government-wide study; Supporting the through an RFI and RFQ process. Federal CIO Council in Managing the Government-wide data center consolidation program including guidance, data collection and 8. Platform-as-a-Service (PaaS) - Geospatial assisting agencies develop and implement data center consolidation Working with government agencies in developing a geospatial plans. platform pilot for sharing data and developing applications for geospatial purposes. U.S. General Services Administration 2/17/11 Cloud/Gov 2011 3
  • 4.
    Federal Government CloudComputing Potential Source: Federal Cloud Computing Strategy (http://www.cio.gov) 2/17/11 Cloud/Gov 2011 4
  • 5.
    Economics are motivatingthe transformation Agencies will be required to complete New Budget Submission Beginning FY alternative analyses that includes cloud Requirements 2011 computing alternatives as a part of their future budget submissions. By September Alternative analyses for all newly planned or 2011 performing major IT investments. By September 2012: alternative analyses for all IT By September investments, making enhancements to an existing 2012 investment. By September 2013: alternatives By September 2013 analyses for all IT investments in steady-state. Source: FY2011 OMB Report on Information Technology 2/17/11 Cloud/Gov 2011 5
  • 6.
    GSA Cloud ComputingPMO Overview Promoting adoption and removing obstacles in the government-wide acquisition and utilization of cost effective, green and sustainable Federal cloud computing solutions. Apps.gov FedRAMP Data Center Infrastructure- Software-as-a- Platform-as-a- Consolidation as-a-Service Service Email Service Initiative (Geospatial etc.) http://info.apps.gov 2/17/11 Cloud/Gov 2011 6
  • 7.
    http://Apps.gov Cloud Services available on http://apps.gov First Federal storefront site to commoditize cloud services so that buyers may cross-compare products and purchase (launched September, 2009). Currently offering SaaS and social media products. 2/17/11 Cloud/Gov 2011 7
  • 8.
    http://info.apps.gov (All ThingsGov’t Cloud!) News and Keeping you Information informed in on Cloud upcoming and Data events! Center Topics Reference Provides Documents tools to at your navigate the fingertips! cloud landscape Info.Apps.gov is a place where agencies can gather information about how Cloud Computing can help create sustainable, more cost-effective IT Services for the Federal Government 2/17/11 Cloud/Gov 2011 8
  • 9.
    Infrastructure-as-a-Service (IaaS) BPA BPA IaaS Services Storage Virtual Machines Server Hosting • Blanket Purchase Agreement (BPA) • Online Web • Online VMs / • Online Server Based Storage Computing Hosting • FISMA “Moderate” • Store Files & • Multiple CPU & • DNS and CDN Level Security for Data Objects OS Types Capabilities Government On-demand Self Service Online, self service provisioning capabilities for services • Services will be made available through Ubiquitous Network Access purchase on apps.gov Accessible via the Internet with a sufficiently robust architecture Location Independent Resource Pooling RFQ Required Massively scalable services, independent of location of resources Cloud Computing Rapid Elasticity Characteristics Scale up or down dynamically based on consumption and/or request Measured Service Utilization and consumption GUI dashboard and electronic interfaces 2/17/11 Cloud/Gov 2011 9
  • 10.
    Infrastructure-as-a-Service (IaaS) Awardees 12 Awardees across 3 Lots: • Cloud Storage • Virtual Machines • Web Hosting 2/17/11 Cloud/Gov 2011 10
  • 11.
    Software-as-a-Service (SaaS): Email • Inter-agency SaaS Email Working Group established in June 2010. • Developing an RFQ for a government-wide BPA of SaaS email solutions. • RFI completed. • 13 respondents. • RFI responses will be leveraged to create RFQ requirements. • Pre-solicitation day held November 1 to solicit vendor and government feedback. • Email Procurement to be conducted early 2011. • GSA completed security authorization of Google Apps which may be leveraged by other agencies. • USAID leveraged Google Apps security authorization package to greatly reduce timeline for system implementation 2/17/11 Cloud/Gov 2011 11 11
  • 12.
    Federal Risk &Authorization Management Program (FedRAMP) Unified Government-wide Risk Management Program Problem: Independent agency risk management has inefficiencies • Provides joint security authorization and continuous Federal Agencies monitoring • Agencies participate by leveraging the results for covered products • Agencies retain their responsibility and authority to ensure their security needs are met in the use of systems Cloud Providers Solution: Unified risk management Vendor Benefits eliminates inefficiencies • Government-wide authorization and security compliance cost reduction Agency Benefits • Cost savings through reduced duplication • Rapid acquisition • Increased security assurance Cloud Providers 2/17/11 Cloud/Gov 2011 12
  • 13.
    Questions and Answers http://Apps.gov http://info.apps.gov http://www.cio.gov 2/17/11 Cloud/Gov 2011 13