4/11/17

1

AReportonASEANCloudStudy

Asst.Prof.Dr.Sudsanguan NgamsuriyarojFacultyofICT,Mahidol University

11April2017

OURTEAM

AReportonASEANCloudStudy 2

• Dr.Sudsanguan Ngamsuriyaroj(Mahidol U.)• Dr.Kasititorn Pooparadai (NECTEC)• MissNantawan Wongkachonkitti (EGA)• Mr.Charin Thiratitayangkul (EGA)• SeveralEGAStaffwhooftenstayedlateforthemeeting

• FundedbytheMinistryofICT,Thailand

• To understand the current status of Cloud Computingtechnology and the requirements from Policy and ICTFramework viewpoints of each member stategovernment and major business sector

• To study best practices and frameworks for CloudComputing deployment and development and bridgethe different viewpoints of each member state

• To initiate a starting point to develop PolicyRecommendations and ICT Framework on CloudComputing development in ASEAN

AReportonASEANCloudStudy 3

Objectives

AReportonASEANCloudStudy 4

ReadinessforCloudAdoption

IndicesdefinedbyAsiaCloudComputingAssociation(ACCA)andBusinessSoftwareAlliance(BSA)

• Infrastructure:broadbandquality,ICTreadiness,internationalconnectivity• Dataprivacy• Datasovereignty• Security• Cybercrime• Intellectualpropertyrights

• Supportforindustry-ledstandards• Promotingfreetrade• Governmentregulatoryenvironmentandusage• Businesssophistication• Datacenterrisk• Freedomofinformationaccess

4/11/17

2

AReportonASEANCloudStudy 5

CloudComputingReadinessIndex2016

NodataforLaos,Cambodia,BruneiandMyanmar

• Basicinformationofthecountrysuchaspopulation,GDP• BasicICTinfrastructureofthecountryincluding,butnotlimitedto,fixedlineandmobile,Internetandbroadbandpenetration• BasicinformationonICTconsumptionpatternsuchasmarketvalue,ifapplicable• CurrentpoliciesandregulationsregardingICTingeneralandonCloudComputinginparticular.Wefocusonacrosssectors,notindustry-specific,policiesandregulations,especiallytheonewithdirectimpacton“Data”suchasDataSecurityandDataPrivacy

AReportonASEANCloudStudy 6

DataGathering

CloudComputingMarketinASEAN2014

AReportonASEANCloudStudy 7

Country %Cloud Adoption SectorsGovernment use Business Use

Brunei 41% - Education, Healthcare

Indonesia - 42%Finance, Retail, Transportation, Creative Industry

Malaysia - 33%Transportation, Retail, Art and Entertainment

Philippines - 35%Business Outsourcing, Tech Startup, Retails

Singapore 80% 51% Commerce, Hotel, Food, Property

Thailand - 34% Telecom, Finance, Commerce, Logistic

Vietnam - 39% Commerce, Finance, Education

RelatedLawsandRegulationsinASEAN

Issues Brunei Cambodia Indonesia Laos Malaysia Myanmar Philippines Singapore Thailand VietnamDataPrivacy

Draft - Yes2008

- Yes2010

- Yes2012

Yes2012

Yes1997

Yes2010

Cyber-crime

Yes2007

Yes Yes2008

Yes Yes1997

Yes2004

Yes2012

Yes2010

Yes2007

Yes2004

Security(ElectronicTransaction)

Yes2011

Draft Yes2008

Yes2012

Yes2006

Yes2004

Yes2000

Yes2010

Yes2008

Yes2005

IP(Copyrightlaw)

- - 2002 Draft

2012 - RepublicAct 2006 1994 1999

AReportonASEANCloudStudy 8

4/11/17

3

• ToboostupNationalICTCapabilitythrucloudcomputing,setup3agencies• E-GovernmentNationalCommittee• E-BusinessLeadershipForum• E-GovernmentTechnicalAuthority

AReportonASEANCloudStudy 9

ASEANCloudProfile:Brunei

AReportonASEANCloudStudy 10

ASEANCloudProfile:Indonesia

AReportonASEANCloudStudy 11

ASEANCloudProfile:Malaysia

AReportonASEANCloudStudy 12

ASEANCloudProfile:Philippines

Ref:Cocoy J.Claravall,TheRightTypeofCloudMessaging

4/11/17

4

AReportonASEANCloudStudy 13

ASEANCloudProfile:Singapore

AReportonASEANCloudStudy 14

ASEANCloudProfile:Thailand

AReportonASEANCloudStudy 15

ASEANCloudProfile:Vietnam

Ref:NguyenChiDuc,“CloudAdoptioninVietnam”

GovernmentCloudInitiatives

• USACloudInitiatives• UKG-CloudInitiatives• SingaporeGovernmentCloud• ThailandE-GovernmentCloud• TrustedCloudEuropeFramework

• RecommendationsforTrustedASEANCloudFramework

AReportonASEANCloudStudy 16

4/11/17

5

TrustedCloudEuropeFramework

StudyofCloudFrameworks 17 AReportonASEANCloudStudy 18

ProposedThailandCloudSecurityFramework

ProposedTrustedASEANCloudFramework

AReportonASEANCloudStudy 19

Standards Faircontract

Codeofconduct

SLA Certifications

DataRequirements SecurityRequirements ServiceRequirements

Healthcareservices

Identityservices Financial services DataScienceservices

NationCloud

Consensusbuilding

Bestpractices

Usecases

Government GovernmentIndustry Industry

……………….Alignm

entofPoliciesandLegislations

BestPractices

AReportonASEANCloudStudy 20

4/11/17

6

ConsensusBuilding

AReportonASEANCloudStudy 21

DataRequirements SecurityRequirements ServiceRequirements

Data TypesDataFormatsDataProtectionDataCreationDataUsageDataArchivalDataDisposalDataMigrationDataTransformation

IdentityAuthenticationAccessPermissionsaccording to:- User roles- groups- Timerestriction- PlacerestrictionSecuritypolicies

IaaS servicesPaaS servicesSaaS servicesServicedomainsServiceagenciesServicepropertiesService operations