All Things Open 2014 - Day 1 Wednesday, October 22nd, 2014 Olivier Thierry Chief Marketing Officer of Zimbra Open Government/Open Data Why Governments Depend on Open Source for Secure, Private Email

1. Why Governments Depend on
Open Source for Secure, Private Email
Olivier Thierry
CMO, Zimbra

2. Increased Need of Security & Privacy
October 22, 2014 2

3. October 22, 2014 3

4. We Need to Elevate Security & Privacy
October 22, 2014 4
Source: xkcd.com/538

5. ① Transparency/Auditability
October 22, 2014 5
NO
• “skeleton keys”
• hidden components
• embedded proprietary
software
Heartbleed patch on git.openssl.org

6. Worldwide Adoption of
Open Source Software (OSS) by Public Sector
October 22, 2014 6

7. October 22, 2014 7

8. Community
Code
Extensions
② Reduced Cost
October 22, 2014 8
Open Source ProjectOpen Source Community
*Industry standard: ~$10 - $20 / line of code
Source: Black Duck Software | Cost, Freedom and Control: The Dividends of Migrating to Open Source
Force
Multiplier
Patches
Add-ons
Modules
Products
Support
Security
OS
Core
OS
Core

9. ③ Product Customization & Flexibility
October 22, 2014 9
The core open source product
+
Product extensions into
your unique environment
The products you want to use
& the solutions you need=
Community Code Extensions
OS
Core

10. ④ Advanced Interoperability
October 22, 2014 10
*Source: According to Black Duck’s Future of Open Source Survey, 2014
Quote: U.S. Digital Services Playbook | Play 8 “Choose a modern technology stack”
68%
Believe Open APIs will reinforce
OSS growth/adoption*
“digitalservicesteamsshouldconsiderusingopensource,cloudbased,
andcommoditysolutionsacrossthetechnologystack”

11. ⑤ Improved Quality
October 22, 2014 11
given enough eyeballs, all bugs are shallow
*Source: According to Black Duck’s Future of Open
Source Survey, 2014 Quote: Linus’ Law
8/10
choose open source based on quality*

12. US Government Adoption of OSS
October 22, 2014 12

13. US Government’s Embrace of OSS
October 22, 2014 13
“Whenwecollaborateintheopen
andpublishourdatapublicly
wecanimprovegovernmenttogether.”
“WhiletheU.S.governmenthas,todate
notissuedguidancerequiringapreferencefor
opensource,ithasclearlyindicatedthat
opensourceproductsaretobegivenat
leastasmuchpreferenceasproprietary
products.”
Quote: U.S. Digital Services Playbook | Play 13 “Default to Open”
Quote: Opensource.com

14. October 22, 2014 14
US Government’s Embrace of OSS
(http://gov-oss.org/)

15. ⑥ Community Involvement
October 22, 2014 15
Top 10 US government organizations using open source
+400
repositories
Source: http://www.govcode.org/stats

16. ⑦ Reusability
October 22, 2014 16
“…allow the public to easily provide fixes and
contributions, and enable reuse by entrepreneurs,
nonprofits, other agencies, & the public.”
= “GitGov”
reusable platform for agencies to rapidly build government services

17. Government’s Need for Security &
Compliance
October 22, 2014 17

18. October 22, 2014 18
DHS & the SWAMP = Quality
“…with hundreds of open source software packages
and multiple software assurance tools, we will
improve the community’s understanding of and
access to state-of-the-art software assurance.”
Source: govtech.com
Quote: continuousassurance.org, about us, “outputs”

19. ⑧ Compliance
October 22, 2014 19
Source: PWC, State of Compliance: 2013 Survey
32% rated
Data Privacy &
Confidentiality
the #1
perceived risk
to compliance
Compliance requires…
-> flexibility & customization
-> transparency & auditability
-> open standards & APIs
-> robust security & privacy

20. Summary of Reasons to Use Open Source
① Transparency/Auditability
② Community Involvement
③ Reduced Cost
④ Product Customization & Flexibility
⑤ Advanced Interoperability
⑥ Improved Quality
⑦ Re-Usability
⑧ Compliance
October 22, 2014 20

21. Open Source Email
October 22, 2014 21

22. Government & Email Security
Federal Information Processing Standards (FIPS): consistent
use of security & communication guidelines through open standards
• Data Privacy
1. At-rest & in-motion encryption
2. End-to-end encryption
• Identity
1. Digital signature
2. 2-factor authentication
Open source email leverages open standards to provide compliant
cryptographic modules for data encryption
October 22, 2014 22

23. Tenets for Secure Collaboration
October 22, 2014 23
Ability to integrate 2FA & encryption
Ability to provide control over data &
hosting location
Ability to provide transparency on code
base

24. October 22, 2014 24
Over 1,000 government & financial
institutions rely on Zimbra to protect the
security & privacy of their collaboration data.

25. October 22, 2014 25
KEEP
CALM
AND
STAY
OPEN

26. ©2014 Zimbra Systems, Inc. All rights reserved. Zimbra and
its symbol are registered trademarks or trademarks of Zimbra,
Inc. Other company and product names mentioned herein are
property of their respective owners. The contents of this
publication are subject to change without notification and are
the property of and cannot be reproduced without the written
permission of Zimbra. The contents of this publication are not
a commitment by Zimbra to provide the features and benefits
described.
www.zimbra.com
October 22, 2014 26