RANTIP-CloudComputingResearchCaseofKENYA(CLOUDUSERPERSPECTIVES)NOV2017Dr.T.Omwansa &J.Walubengo 1

1.Background• ResearchispartoftheRegionalAcademicNetworkonITPolicy(RANTIP)

• Aim• Tostudycloudserviceprovision,adoptionandusageinKenya,particularlywithinthepublicsector.

• Methodology• SurveyedRespondentsfromtheCloudProvider&CloudUserPerspectives.Nine(9)CloudProvidersandFifteen(15)CloudUsersgavefeedbackwiththemajoritycomingfromthepublicsector. 2

2a.Objectives• Tofilltheexistingresearchgapsoncloudcomputinginthepublicsectorinemergingeconomycontexts.

• Tomovebeyondthetraditionalprimaryimplementationfocusontechnologyinordertounderstandsocial,economicandpoliticalfactorsdeterminingtheimplementationofcloudcomputinginthepublicsector.

• Toinfluencepolicybytakingthesystematicandrigorousevidenceintopolicyprocesses;

• ToidentifypolicybottleneckstotheimplementationofcloudcomputingintheKenyanpublicsector ;

• Toprovidepolicyrecommendationsonhowtodeveloppolicyframeworkswhichenablethedeploymentofcloudcomputinginthemodernizationofthepublicsectorandenhancementofservicedelivery ’

3

2b.ResearchQuestions• WhatisthestateoftheCloudProvider/CloudUserIndustry?• WhataretheskillsgapswithintheCloudIndustry• WhatisthestatusofClouduseinPublicSector?• WhatarethebarriersandchallengeswithrespecttoadoptionofCloudComputing:- barriersandchallenges

• WhatarethePolicy&RegulatoryrecommendationsforCloudComputingAdoption.

4

3a.CloudUsageStatus/MarketAnalysis

• Areyoucurrentlyusingcloudservices(Y/N/Other)

5

3b.CloudUsageStatus/MarketAnalysis

• Whichaspectsofthecloudareyouusingnow?• PaaS (6/15);IaaS (8/15);SaaS (9/15); None(2/15);

• Doyouplanorconsiderusingcloudservicesinthefuture(within6mnths)(Y/N)

6

3c.CloudUsageStatus/MarketAnalysis

• Listwhatyouconsidertobeyourtopthreepreferredcloudserviceprovidersintheregion.• 1st PreferredCloudProvider:• Safaricom (6/12);Amazon(3/12);Google(2/12);KENET(1/12)

• 2nd PreferredCloudProvider:• Microsoft(2/10);Amazon(2/10);Safcom;IBMJamii Telecom;NodeAfrica,AccessKenya;CloudPap(1/10each)

• 3rd PreferredCloudProvider:• Liquid(2/10);Safcom,Microsft,Amazon,GovtCloud,DropBox,Google

7

3d.CloudUsageStatus/MarketAnalysis

• Whichserviceshaveyoumovedtothecloud?

• TopSoftwareasaService:• eMails (7/12),WebService (7/12),OracleHR,Office365

• TopPlatformasaService:• ProgrammingTools(1/4);None(3/4)• TopInfrastructureasaService:• Storage(5/6) 8

3e.CloudUsageStatus/MarketAnalysis

• Whataretopthree/Apps/Services/Resourcesthatyourcustomersmostlyuse• Top(SaaS):• Mail,OfficeProduct,WebApplicaiton,LearningMngtSys

• Top(Paas):• Lamda,PABX,VPNs

• Top(IaaS):• Storage,VirtualMachines,DRServices

9

3f.CloudUsageStatus/MarketAnalysis• Whichtopthreeskillsdoyourequireinternallyinordertomigrate,manageandsupportcloudservices?• 1st PrioritySkills:• Info/Cyber_Security (4/14);NetworkingSkills(2/14);TechSkills(2/14);Dev Ops,Client-SideMngemt,CloudSupport,ApplicationSupport,Prog

• 2nd PrioritySkills:• Info/Cyber_Security (3/12);NetworkingSkills(2/12);ProjectMngt;Contract/SLAMngt;Prog,SystemAdmin,BusContinuity.

• 3rd PrioritySkills:• NetworkingSkills(3/10);Security,Contract/SLAMngt,Virtualization,Storage,Contracting,DBManagement

• (*nothingonbusinessprocessre-engineering,cloudroadmap) 10

3g.CloudUsageStatus/MarketAnalysis

11

• Towhatextenddoyoufeeltheseskillsarereadilyavailablelocally?

4a.CloudDrivers,Barriers&Challenges

TowhatextenddoyouthinktheTechnologiesforprovidingCloudComputingServicesaremature?

12

4b.CloudBarriers

• Whatdoyouthinkarethetopfourfactors(barriers)thatwouldnegatively affectyourdecisiontomovetothecloudservice

• 1st Factor: SecurityConcerns(6/12);Cost,Procurementrisk,LackofKnowledge/Awareness,ClientSideissues&Politics

• 2nd Factor: Security(4/12);LackofPolicy/Laws(DataProtection2/12),LackofKnowledge/Awareness,DataSovereignty/JurisdictionIssues,PoorCloudServices,Cost

• 3rd Factor:LackofControloverCloudServer/Staff(SLAs);StabilityofCloudProvider (Contracttransitionissues);PoorConnectivity,FearsofVendorLock-in,Costs,ProcurementChallenge

• 4th Factor: TechnicalResistancetoChange,PoorConnectivity,LackofLaws,SLAs(FearsofVendorLock-in/contracttransitionissues);High-turnoveratStrategicLeadership

13

4c.CloudDrivers• Whatdoyouthinkarethetopfourfactors(Drivers)thatwouldpositively affectyourdecisiontomovetothecloudservice

• 1st Factor: CostSavings(Capex2Opex,hr,support)(5/12);ChangingTechnology(2/12);Storage/DR;ICTLeadership

• 2nd Factor: CostSavings(2/10),AvailabilityofLocalCloudProviders(2/10)ChangingTechnology,IncreasedEfficiency&SupportthroughOutsourcing;LackofInternalICTCapacities.

• 3rd Factor: AvailabilityofLocalCloudProviders(2/9),CostSavings,AvailabilityofSkills,Scalability,AffordableStorage

• 4th Factor: IncreasedSecurity

14

4d.CloudBenefits

• Listtopthreebenefitsyouhaverealizedorhopetorealizebymovingtothecloud.

• 1st Benefit: CostSavings(4/12);BetterUptime,EfficiencyGains,ServiceAvailability/Stability,ReducedMngt Overheads,DRServices

• 2nd Benefit: High-AvailabilityofServices(4/11);CostSavings,lowCAPEX(2/11);SLAs,Outsourcingenhancesfocusoncorebusiness

• 3rd Benefit: High-Availability,ofServicesAgility(speedtomarket);flexibility,scalability,optimizationofresources,betterfocusoncorebusiness,bettersecurity,

15

4e.CloudChallenges

• Whatarethefourtopchallengesyouareexperiencingormightexperiencefromtheusingcloudservices?

• 1st Challenge: Info_Security/CyberThreats(5/10),LackofPolicies_Laws (Procurement,Data/Privacy2/10);LackofInternalcloudskills;InflexibleSaaS Solutions.

• 2nd Challenge: LackofFinancing(2/9);FearofVendor-Lockin(2)(DataOwnership/SLAIssues);PoorConnectivity,LackofPolicy_Laws,HiddenCharges(withincreasedvolumes);

• 3rd Challenge: LackofSkills/RoadmaptoCloudServices(2/10);Info_security Threats;Inabilitytoportapplications,CostofConnectivity,NoBudgets

• 4th Challenge: DataJurisdiction/Sovereignty;Info_Security,PoorInfrastructure,TechnicalResistance

16

5a.Policy,Regulations&Standards

• Isthereanygovernmentsupportyouarereceivingtowardscloudinitiativesandwhatelseshouldgovernmentdotostimulatecloudadoption?• Nosupportatthemoment– OtherthantheGovt DataCenterusedasBackupFacility(x5)

• ICTAuthorityShouldleadthewaywithPolicies&StratgiesonCloudAdoption

• Governmentcoulddevelopenablingpoliciestoguideboardsandtopmanagement.

• GovernmentcouldalsoreviewtheprocurementlawsasrelatestoICTingeneralandcloudinparticular

• Governmentcouldsignframeworkcontractswithkeyprovidersallowingothergovernmentagenciesjoininatpredictablecost,servicelevelsthuslargelyreducingtheprocurementrisk

17

5b.CloudPolicy Environment• Arethereexistingnationaland/ororganizationalCloudpolicy&regulatoryframeworkandhow does thisimpactonCloudadoption?• *None(7/10)• *ICTAuthorityhassomepublishedStandardbutadoption/enforcementweak(http://icta.go.ke/standards/cloud-computing-standard-2/).*DraftCyberSecurity Regulationsrecommendlocalhostingofpublicdata(supportslocalhosting)

• *JudiciaryICTpolicysupportscloudservice– subjecttopendinglaws.

• *ExistingLegalandOperationalFrameworks(e.g.Procurement)hamperclouduptake

18

5c.CloudPolicyRecommendation

• Whichspecificpolicydoyoufeelwouldsupportthecloudcomputinginitiatives?

• *UpcomingrevisedNationalICTPolicy2017shouldhavecloudprovisions• *NeedspecificclauseonDataSovereignty/Jurisdiction/Disposal(DataProtectionLaws/CyberSecurityLaws)

19

5d.CloudRegulatoryRecommendation

• Whichspecificregulatoryinterventiondoyoufeelwouldsupportthecloudcomputinginitiatives.• *NeedforDataProtection/CyberSecurity Laws• *UpdateKenyaInformationCommunicationAct• *CommunicationRegulatortosubsequentlyenactsupportingDataProtection/Security&regulations.• *ReviseProcurementLawstofacilitateCloudAdoption. 20

5e.CloudStandardsRecommendation

• Whichspecificstandardsdoyoufeelwouldsupportthecloudcomputinginitiatives.

• *ISOStandardsonInfo_Security• *ISOStandardsonCloudServices• *AuditStandards&PracticeforCloudProviders

21

Respondents• ParliamentofKenya• MinistryofICT• CommunicationsAuthorityofKenya• ICTAuthority-Director• ICTAuthority-Manager• JudiciaryofKenya• CountyGovernmentofBungoma• Kytabu CompanyLimited• KenyaRevenueAuthority• MultimediaUniversityofKenya• DimensionData• Ecobank• MinOfEducation• MinistryofICT• NSSFKENYA

•

22

Ends• Q&A

23