Welcome!

@CloudExpo Authors: Pat Romanski, ManageEngine IT Matters, Liz McMillan, Elizabeth White, XebiaLabs Blog

Related Topics: @CloudExpo

@CloudExpo: Blog Feed Post

Cloud Privacy By Design and E-Discovery as a Service

Digital-Economy.ca - Canada isn’t really any further behind the rest of the world

As the Government’s own Digital Advantage paper recommends, the key to addressing Canada’s innovation gap is for CIO’s to adopt more new technologies like Cloud Computing, and the public sector can ignite this trend by leading the way with their own adoption.

Don Drummond makes a similar recommendation in his report. Recommendation 16-10 says: The government should shift its service delivery of information and information technology (I&IT) from in-house to external sources, where feasible.

However as this Telus press release and study reports, the reality is that in Canada is still in the early stages of there being very little external Cloud adoption, principly due to data security concerns.

Cloud Privacy Innovations

The critical point to note is that Canada isn’t really any further behind the rest of the world. Although there is significant press about the USA and UK in particular, and yes they are at least two years further down the track, this is a looong track and it’s only just started. Cloud is so massive, and so long term, opportunities still abound.

Indeed the central theme of this article is that Canada is equipped with some uniquely exciting capabilities that could make our vision of the country becoming a world leader in this field a reality, most notably the concept of ‘Cloud Privacy By Design’.

As shown here this is one of the foundations of Cloud Best Practices we recommend for security and privacy protections, and the critical point with innovation programs in mind is that this is an entirely embryonic green field of opportunity, a wealth of new technologies can and will be released to implement these practices.

This is powerfully described by the authors via this piece Privacy, Trust and Innovation. This describes how these practices can underpin Digital Economy innovations, and what role they might play in Cloud Computing, as well as general Internet and IT scenarios such as social networks, mapping technologies, Location Based Services, e-Health and the Internet of Things.

The article makes a number of recommendations for Canada to pioneer Digital Economy innovations:

  • Taking a holistic view and building privacy in from the start
  • Funding research to support digital literacy programs
  • Funding privacy positive research and development
  • Targeting SMEs that are technology innovators
  • Providing tools to help SMEs better understand privacy
  • Making privacy literacy an integral component of digital citizenship

One example of innovations in this field includes the industry organization Kantara.

As this Privacy presentation explains, Kantara provides all the required mechanisms to implement these best practices across Cloud providers, meeting all the privacy and technical requirements needed to ensure it is suitable for e-Government scenarios.

EDaaS : E-Discovery as a Service

These innovations could then enable a portfolio of new Cloud services ideal for government.

As the Telus press release describes, the key fact is really this one:

87 per cent of Canadian business and IT leaders have significant concerns about public cloud’s ability to handle data in compliance with regulations and legislation.

The step that will unleash the dam of Cloud adoption will be the ability to rate and certify Cloud providers in line with these best practices, in short to be able to prove this compliance.

In their Reach for the Cloud analysis, the Privacy Commissioner of Canada says that:

“it is also possible that the Government of Canada might create a “private cloud” infrastructure internally to facilitate information sharing, or even that some or all government institutions might make use of a cloud infrastructure for data processing or storage.”

Not only do Cloud providers need to be able to implement secure Cloud environments, they’ll need to be able to prove how secure they are, in line with a set of industry guidelines.

Being able to do so will provide a foundation not only for the legal compliance of the environment, but for new services that can make use of this capability, most notably ‘EDaaS’ : E-Discovery as a Service. This refers to “Records Management in the Cloud”, where record keeping requirements and best practices can be applied across Cloud environments.

Fundamentally this is about audit and compliance, and is a massive global opportunity. President Obama recently declared the ‘Managing Government Records‘ initiative , to better use Cloud technologies to perform Information Management and achieve Open Government. Canada also recently announced a similar initiative, to build a ‘GC Docs’ portal that publishes all of their records.

Conclusion

In this blog the Privacy team again repeats the point about Government leading the way in exploiting this opportunity as a means of Canada pioneering Digital Economy leadership:

We’ve written previously about the need to reform the Privacy Act, but we think the federal government can go even further in being a model user of technology

They refer to how the USA Government is moving ahead with building the required Identity authentication foundations into their e-Government strategies, adopting the NSTIC program.

NIST, the US Government organization who is leading this also spearheads the definition of Cloud computing overall, and also defined the requirements for these managed services for E-DaaS, described in this FAA E-Discovery Business Use Case (11-page PDF).

This provides the specifications for how Cloud providers can implement E-DaaS, so in combination with the Kantara methods, NSTIC procedures and so forth, there is a uniquely opportunity to be first to market with what will be the floodgate-opening managed services.

Canada’s unique opportunity is to provide the intellectual property that acts as the key to open this lock…

More Stories By Cloud Best Practices Network

The Cloud Best Practices Network is an expert community of leading Cloud pioneers. Follow our best practice blogs at http://CloudBestPractices.net

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
There is growing need for data-driven applications and the need for digital platforms to build these apps. In his session at 19th Cloud Expo, Muddu Sudhakar, VP and GM of Security & IoT at Splunk, will cover different PaaS solutions and Big Data platforms that are available to build applications. In addition, AI and machine learning are creating new requirements that developers need in the building of next-gen apps. The next-generation digital platforms have some of the past platform needs a...
Without a clear strategy for cost control and an architecture designed with cloud services in mind, costs and operational performance can quickly get out of control. To avoid multiple architectural redesigns requires extensive thought and planning. Boundary (now part of BMC) launched a new public-facing multi-tenant high resolution monitoring service on Amazon AWS two years ago, facing challenges and learning best practices in the early days of the new service. In his session at 19th Cloud Exp...
SYS-CON Events announced today that Secure Channels will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. The bedrock of Secure Channels Technology is a uniquely modified and enhanced process based on superencipherment. Superencipherment is the process of encrypting an already encrypted message one or more times, either using the same or a different algorithm.
While DevOps promises a better and tighter integration among an organization’s development and operation teams and transforms an application life cycle into a continual deployment, Chef and Azure together provides a speedy, cost-effective and highly scalable vehicle for realizing the business values of this transformation. In his session at @DevOpsSummit at 19th Cloud Expo, Yung Chou, a Technology Evangelist at Microsoft, will present a unique opportunity to witness how Chef and Azure work tog...
Almost two-thirds of companies either have or soon will have IoT as the backbone of their business in 2016. However, IoT is far more complex than most firms expected. How can you not get trapped in the pitfalls? In his session at @ThingsExpo, Tony Shan, a renowned visionary and thought leader, will introduce a holistic method of IoTification, which is the process of IoTifying the existing technology and business models to adopt and leverage IoT. He will drill down to the components in this fra...
SYS-CON Events announced today that Numerex Corp, a leading provider of managed enterprise solutions enabling the Internet of Things (IoT), will exhibit at the 19th International Cloud Expo | @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Numerex Corp. (NASDAQ:NMRX) is a leading provider of managed enterprise solutions enabling the Internet of Things (IoT). The Company's solutions produce new revenue streams or create operating...
I'm a lonely sensor. I spend all day telling the world how I'm feeling, but none of the other sensors seem to care. I want to be connected. I want to build relationships with other sensors to be more useful for my human. I want my human to understand that when my friends next door are too hot for a while, I'll soon be flaming. And when all my friends go outside without me, I may be left behind. Don't just log my data; use the relationship graph. In his session at @ThingsExpo, Ryan Boyd, Engi...
IoT is fundamentally transforming the auto industry, turning the vehicle into a hub for connected services, including safety, infotainment and usage-based insurance. Auto manufacturers – and businesses across all verticals – have built an entire ecosystem around the Connected Car, creating new customer touch points and revenue streams. In his session at @ThingsExpo, Macario Namie, Head of IoT Strategy at Cisco Jasper, will share real-world examples of how IoT transforms the car from a static p...
SYS-CON Events announced today that Pulzze Systems will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Pulzze Systems, Inc. provides infrastructure products for the Internet of Things to enable any connected device and system to carry out matched operations without programming. For more information, visit http://www.pulzzesystems.com.
If you’re responsible for an application that depends on the data or functionality of various IoT endpoints – either sensors or devices – your brand reputation depends on the security, reliability, and compliance of its many integrated parts. If your application fails to deliver the expected business results, your customers and partners won't care if that failure stems from the code you developed or from a component that you integrated. What can you do to ensure that the endpoints work as expect...
DevOps at Cloud Expo – being held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA – announces that its Call for Papers is open. Born out of proven success in agile development, cloud computing, and process automation, DevOps is a macro trend you cannot afford to miss. From showcase success stories from early adopters and web-scale businesses, DevOps is expanding to organizations of all sizes, including the world's largest enterprises – and delivering real results. Am...
The Internet of Things can drive efficiency for airlines and airports. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Sudip Majumder, senior director of development at Oracle, will discuss the technical details of the connected airline baggage and related social media solutions. These IoT applications will enhance travelers' journey experience and drive efficiency for the airlines and the airports. The session will include a working demo and a technical d...
SYS-CON Events announced today that Commvault, a global leader in enterprise data protection and information management, has been named “Bronze Sponsor” of SYS-CON's 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Commvault is a leading provider of data protection and information management solutions, helping companies worldwide activate their data to drive more value and business insight and to transform moder...
The Transparent Cloud-computing Consortium (abbreviation: T-Cloud Consortium) will conduct research activities into changes in the computing model as a result of collaboration between "device" and "cloud" and the creation of new value and markets through organic data processing High speed and high quality networks, and dramatic improvements in computer processing capabilities, have greatly changed the nature of applications and made the storing and processing of data on the network commonplace.
SYS-CON Events announced today that Bsquare has been named “Silver Sponsor” of SYS-CON's @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. For more than two decades, Bsquare has helped its customers extract business value from a broad array of physical assets by making them intelligent, connecting them, and using the data they generate to optimize business processes.
Fact is, enterprises have significant legacy voice infrastructure that’s costly to replace with pure IP solutions. How can we bring this analog infrastructure into our shiny new cloud applications? There are proven methods to bind both legacy voice applications and traditional PSTN audio into cloud-based applications and services at a carrier scale. Some of the most successful implementations leverage WebRTC, WebSockets, SIP and other open source technologies. In his session at @ThingsExpo, Da...
Traditional on-premises data centers have long been the domain of modern data platforms like Apache Hadoop, meaning companies who build their business on public cloud were challenged to run Big Data processing and analytics at scale. But recent advancements in Hadoop performance, security, and most importantly cloud-native integrations, are giving organizations the ability to truly gain value from all their data. In his session at 19th Cloud Expo, David Tishgart, Director of Product Marketing ...
The vision of a connected smart home is becoming reality with the application of integrated wireless technologies in devices and appliances. The use of standardized and TCP/IP networked wireless technologies in line-powered and battery operated sensors and controls has led to the adoption of radios in the 2.4GHz band, including Wi-Fi, BT/BLE and 802.15.4 applied ZigBee and Thread. This is driving the need for robust wireless coexistence for multiple radios to ensure throughput performance and th...
SYS-CON Events announced today the Kubernetes and Google Container Engine Workshop, being held November 3, 2016, in conjunction with @DevOpsSummit at 19th Cloud Expo at the Santa Clara Convention Center in Santa Clara, CA. This workshop led by Sebastian Scheele introduces participants to Kubernetes and Google Container Engine (GKE). Through a combination of instructor-led presentations, demonstrations, and hands-on labs, students learn the key concepts and practices for deploying and maintainin...
Enterprise IT has been in the era of Hybrid Cloud for some time now. But it seems most conversations about Hybrid are focused on integrating AWS, Microsoft Azure, or Google ECM into existing on-premises systems. Where is all the Private Cloud? What do technology providers need to do to make their offerings more compelling? How should enterprise IT executives and buyers define their focus, needs, and roadmap, and communicate that clearly to the providers?