Public Input on ‘Cloud Smart’ Policy Starts With a Basic Question: What Is Cloud?

emojoez/Shutterstock.com

Commenters suggested various parameters for what cloud computing in government should look like, but most agreed the draft document needs a better definition.

As the administration looks to finalize an updated governmentwide cloud computing strategy, public input has honed in on what seems like the most basic of questions: How should “cloud” be defined?

The Office of Management and Budget released the draft “Cloud Smart” policy on Sept. 24 and opened a 30-day public comment period to garner feedback. As of Monday, the administration had received 40 comments, the majority from cloud service providers and other industry stakeholders.

In general, most of the comments were unsurprising—commercial cloud companies wanted there to be more focus on using commercial clouds; cybersecurity companies wanted a stronger focus on cybersecurity. But one recurring theme stood out: Should the government push for greater adoption of commercial solutions over in-house—or private—clouds?

The first section of the draft policy suggests there has been much confusion within government over what constitutes cloud computing.

“The term ‘cloud’ inside of government is often used to refer to any technology solution provided by an outside vendor,” the document notes.

In actuality, “’cloud computing’ refers to a variety of technologies that allow the rapid provisioning of systems or services from a shared pool of resources,” the authors wrote, mirroring language used by the National Institute of Standards and Technology in defining cloud.

A number of comments called on OMB to include a more concrete definition of cloud, though they differed on what that definition should be.

“Cloud Smart should reaffirm the administration's desire to ‘bring the government to the cloud’ not ‘bring the cloud to government’ as outlined in the IT Modernization Report,” wrote David Levy, vice president of Amazon Web Services’ federal practice.

Levy urged the administration to include stronger references to commercial—or public—cloud options, rather than a hybrid approach that would mix cloud services owned and operated by an agency with those from private sector companies.

Commenters from the Internet Association, a lobbying group for internet companies, agreed.

“The absence of explicit support for commercial cloud in the draft policy is concerning,” wrote Melika Carroll, the group’s senior vice president for global government affairs. “IA member companies believe commercial cloud offerings provide the superior affordability, flexibility and security that is required by the federal government’s modernization efforts. We encourage the government to revise the policy to specifically state the government will be moving to commercial cloud and to link this goal to pre-existing modernization and commercial cloud efforts.”

But other companies and industry groups disagreed, urging OMB to take the opposite tack with Cloud Smart.

“Most federal CIOs—as well as private sector CIOs—acknowledge, and Intel agrees, that some workloads belong in the public cloud and that some are better in on premise or private clouds as determined by individual mission and security factors,” wrote Intel’s Lisa Davis, who spent 26 years as an IT leader in the federal government.

Employees writing on behalf of Red Hat agreed, noting Cloud Smart calls out the multi- and hybrid-cloud approaches but saying it doesn’t go far enough.

“Cloud Smart should promote a multi-cloud approach explicitly, consistent with its recognition of the importance of hybrid and private cloud implementations,” they wrote. “Agencies should ensure that cloud procurements do not: limit access [to] functionality improvements in the future offered by providers, preclude security and practical benefits of using different cloud providers for different use cases, or create risk of being charged monopoly rents in the future as cloud providers are crowded out.”

Officials from Hewlett Packard Enterprises agreed, as well, and took the argument for highlighting hybrid environments even further.

“The fact that IT organizations can provide their own private cloud services is an important fact because it leads into a key point: The world is hybrid,” the company wrote. “It is no longer an either ‘on-premise’—i.e. ‘on-prem’—or ‘off-premise’—i.e. ‘off-prem’—equation. Hybrid IT reflects the notion that each and every IT organization has an ‘estate’ of environments that they need to choose from and manage.”

Google Senior Policy Counsel Behnaz Kibria took a middle way, stating that OMB is correct in saying many are confused about what constitutes cloud services but added that there needs to be some fluidity in the definition.

“For example, as OMB correctly notes, not all outsourced technology services can be considered ‘cloud’ simply because an outside vendor provides them. The National Institute of Standards and Technology definition of cloud computing … should continue to be the operative one for the government. At the same time, all cloud deployment models are not the same and the question of whether a given solution is right should not end with whether it meets the technical definition of cloud but whether it allows the agency to reap the greatest possible benefits that cloud technology has to offer.”

Rather than focus as much on the definition, Kibria suggests OMB emphasize a “preferred end-state so that agencies move as expeditiously as possible to public cloud options.”

Researchers at MITRE, which runs several federally-funded research institutions, also used the “end-state” language in their recommendation to highlight hybrid options.

“MITRE recommends enhancing the document to include an updated federal cloud vision statement and supporting objectives,” wrote Science and Technology Analyst Duane Blackburn. “The strategy should clearly articulate the federal CIO’s desired end-state for federal cloud adoption and address the holistic, multi-functional and integrated approach needed to properly adopt cloud capabilities.”

OMB officials are preparing to review all 40 comments submitted but are also angling to get a few more. Officials decided to keep the public comment period open until Oct. 31 to garner any additional feedback that might be out there.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.