• No results found

Infrastructure Architecture Blueprint. 26 January 2011

N/A
N/A
Protected

Academic year: 2021

Share "Infrastructure Architecture Blueprint. 26 January 2011"

Copied!
61
0
0

Loading.... (view fulltext now)

Full text

(1)

Infrastructure

Architecture

Blueprint

(2)

™

Introduction to Infrastructure Architecture Blueprint

¾

Current Environment Overview

¾

Infrastructure Architecture Framework

™

Strategic Recommendations

¾

Proposed Strategies and Implementation Approach for Infrastructure

Architecture Blueprint

¾

Implementation Roadmap

(3)

Current Environment Overview

d F

k

(4)

Current Environment Overview

Disparate data centre &

disaster recovery

Disparate network

services & connectivity

disaster recovery

centre infrastructure

Non-standard end-user

computing standards

Inefficiencies in ICT

infrastructure

High cost of

maintenance

Non optimised resource

utilisation

(5)
(6)

Strategic Recommendations

d I

l

i

A

h

(7)

“To – Be” Strategies Overview

Objective

To increase public sector productivity, add value to services and improve efficiencies through a

whole-of-Public Sector ICT infrastructures are currently not fully optimised due to redundancies and inefficiencies resulting

Areas of Concern

To increase public sector productivity, add value to services and improve efficiencies through a whole of

government approach on ICT infrastructure.

Public Sector ICT infrastructures are currently not fully optimised due to redundancies and inefficiencies resulting

from disparate ICT Infrastructure.

Strategy

Consolidation of Public Sector Network Establishment of Public Sector Cloud Computing Infrastr ct re Consolidation of Data Centres and Disaster Recovery C t Standardise End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Source Infrastructure
(8)

Strategies Implementation Methodology

Implementation &

Pilot Projects

Laying the

• Establish governance, roles and

Roll-out

• Project roll-out to agency sites.

Pilot Projects

• Selection of pilot site.

Foundation

g

responsibilities.

• Define policies, procedures,

processes and standards.

j

g

y

• Establish project management

and monitoring.

• Establish performance

measurement processes

• Impact assessment of pilot

implementation.

• Implementation on pilot site.

• Gather public sector & agency

requirements.

• Establish change management

plan.

measurement processes.

• Conduct impact assessment

study for benefits realisation.

• Continuous improvement.

• Post implementation review to

identify areas of improvement.

• Plan enhancement based on

l

l

d

• Conduct current environment

assessment.

(9)

Strategy 1: Consolidation of Public Sector Network

• To support policy purpose specified in RMK10

-Consolidation of WAN.

• Integrated whole-of-government network connecting federal,

Integrated whole of government network connecting federal,

state and local government.

• Agencies may access government applications from any

government office locations.

• Agencies may access all government applications from a

single network access.

• Foundation to enable infrastructure consolidation & support

future technology infrastructure (e.g. cloud computing).

future technology infrastructure (e.g. cloud computing).

Key Benefits

• Enhanced service standards.

G

t

f i t

bilit

d

it

• Reduced cost of procurement and services.

• Increased responsiveness to organisational

change.

• Greater assurance of interoperability and security.

• New opportunities for more efficient information

(10)

Strategy 1: Consolidation of Public Sector Network

Implementation Approach

Impact Assessment

Integration

Network

Prioritisation of

agency network

Impact Assessment

Simulation

migration

• Assessment of the

overall impact of the

network migration to

• Migration of the

network connectivity

and services to the

• Establish test

environment and plans

for the network

agency network

consolidation**

Federal agency

network migration to

agencies’

applications, network

security and

connectivity

and services to the

single public sector

network.

• Establish agency level

standard operating

for the network

migration.

• Simulate the network

integration to test the

impact of the network

Local Authority

network

consolidation

requirements.

• Establish migration

plan for the network

and related

standard operating

procedures for network

and security

operations.

impact of the network

migration to the agency’s

network connectivity and

security requirements.

network

consolidation

State agency

applications.

State agency

network

consolidation

**Prioritisation will be based on factors such as current network contractual timeframe, complexity of application integration and agency front line functions.

(11)

Strategy 1: Consolidation of Public Sector Network

Responsibilities

Responsibilities

Responsibilities of MAMPU

y To establish a working group within the Jawatankuasa Infrastruktur ICT for the Public Sector network consolidation initiative for

y To establish a working group within the Jawatankuasa Infrastruktur ICT for the Public Sector network consolidation initiative for project coordination and monitoring.

y To develop the policies related to the governance, procurement, security, management and operational aspects of the consolidated Public Sector network

consolidated Public Sector network.

y To develop the strategies and project implementation plan for network consolidation with regards to the aspects of technical implementation, security, progress monitoring and promotions.

T d l th f k t ith d t t k t f i id d t k i i i f

y To develop the framework agreements with regards to network procurement from service provider and network provisioning for Agencies with flexible commercial and technical requirements.

y To manage the contractual agreements between the Public Sector and third party network service providers with regards to deliverables acceptance and payment disbursement

deliverables acceptance and payment disbursement.

y To develop a change management plan to establish the buy-in from Agencies to centralise the network services and consolidate the network of Public Sector Agencies.

y To conduct an assessment framework for Agencies’ network and impact of the network migration to the Agencies’ applications

(12)

Strategy 1: Consolidation of Public Sector Network

Responsibilities

Responsibilities

Responsibilities of MAMPU

y To develop a plan for phased migration of Agencies’ network connectivity and services with pilot projects and prioritisation

y To develop a plan for phased migration of Agencies’ network connectivity and services with pilot projects and prioritisation according to Agencies’ mission criticality and information sharing requirements.

y To provide assistance and guidelines for the Agency’s network migration and related network configuration and application changes required during migration

changes required during migration.

Responsibilities of Agencies

y To conduct an assessment of the Agencies’ network according to the assessment framework to study the impact of the network

y To conduct an assessment of the Agencies network according to the assessment framework to study the impact of the network integration to the public sector network.

y To develop a network migration plan including critical dependencies, network hardware and software configuration changes, application changes and technical recovery processes for the implementation of the Agency’s network migration

application changes and technical recovery processes for the implementation of the Agency s network migration.

y To provide resources during the Agency’s network migration and related network configuration and application changes required during migration.

y To develop change management plan for the Agency to address organisational changes due to the network consolidation

y To develop change management plan for the Agency to address organisational changes due to the network consolidation initiative.

(13)
(14)
(15)

Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres

Data Centre Consolidation

This strategy to support policy purpose specified in RMK10

-Consolidation of DC and DRC.

Consolidation of data centres across the states accordingly

Consolidation of data centres across the states accordingly

under different regions for Federal agencies (e.g. Northern,

Southern, Central, East Coast, Sabah and Sarawak).

Consolidation by states for State Government.

Local Authorities data centres may be consolidated in either

Local Authorities data centres may be consolidated in either

Regional or State data centres.

The number of consolidated data centres will depend on the

quantity of agency servers and the capability of the data centres.

Key Benefits

• Substantial savings in operating cost and energy

• Encourage sharing of techniques, expertise and

innovation among agencies sharing a data centre.

g

p

g

gy

consumption.

• Improved service standards.

• Financial investment can be focused on operating

high-end data centres.

(16)

Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres

Implementation Approach

Implementation

Roadmap

Implementation Approach

Target Data Centre

Selection

Impact

Assessment

Server

Relocation

Prioritisation of

agency DC/DRC

consolidation**

Federal agency

DC/DRC

consolidation

• Assessment of the

overall impact of the

data center relocation

to agencies’ business,

applications security

• Establish relocation

strategy & plan for

agency’s servers and

hardware equipments.

• Selection of target

data center for

consolidation.

• Gather agency’s

Local Authority

DC/DRC

consolidation

applications, security

and connectivity

requirements.

• Development of

business continuity

• Relocate the servers

and hardware

equipments into the

consolidated data

t

Gather agency s

requirements for

hosting applications in

consolidated data

center environment.

State agency

DC/DRC

consolidation

business continuity

plans for the agency.

center.

consolidation

(17)

Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres

Responsibilities

Responsibilities of MAMPU

y To establish a work group within the Jawatankuasa Infrastruktur ICT for the data centre and disaster recovery centreo es ab s a o g oup e Ja a a uasa as u u C o e da a ce e a d d sas e eco e y ce e consolidation initiative for project coordination and monitoring.

y To conduct feasibility study to identify target data centre for consolidation purposes. The study should highlight the impact with regards to law and regulations, compliance, application migration, technology integration and process.g g , p , pp g , gy g p

y To develop the policies related to the governance, procurement, security, management and operational aspects of the consolidated data centre.

y To develop a change management plan to establish the buy-in from agencies to centralise the data centre facility services byTo develop a change management plan to establish the buy in from agencies to centralise the data centre facility services by region or state.

y To develop a plan for phased implementation of agencies’ data centre consolidation with pilot projects and prioritisation according to agencies’ mission criticality.

y To advise agencies on data centre relocation strategy and activities.

y To develop the framework agreements with regards to data centre space provisioning from service providers and public sector agencies

(18)

Strategy 2: Consolidation of Data Centres and Disaster Recovery Centres

Responsibilities

Responsibilities of Agencies

y To identify agency data centre design, specification, technology architecture and capabilities. Additionally, agency should also inventorise the existing data centre assets which include applications and hardware.

y To conduct an impact assessment study on application migration and data centre assets relocation.

y To identify and recommend agency data centre relocation strategies to the central agency.

(19)
(20)
(21)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

Public Sector Cloud Computing Infrastructure

• Development of Private Cloud for the public sector

for total control and security

for total control and security.

• Enables agencies to select and host ICT services

from a secure, scalable and cost-effective shared

environment.

• Agencies will be able to obtain access to various

cloud services through web portal which can be

provided on-demand with rapid provisioning.

Agencies procurement process will be faster.

Key Benefits

• Substantial savings due to sharing of common

• Enable services to be provided on demand.

• Enable faster provisioning of resources.

g

g

services, applications and infrastructure.

p

g

(22)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

• Virtual Desktop

• EG Apps. • OSCC Apps. • Gov2.0 tools • Office Automation • Website Hosting

• Knowledge Management

• Developer Tools • Storage

• Unified Communication • Testing Tools • Server

N t k • Virtual Machines

• Database • Network

(23)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

Cloud Computing Dimensions

C t l

Five distinct dimensions focused on key aspects, as necessary to plan and implement comprehensive

cloud computing capabilities

Controls

- Laws, Regulations & Business

Requirements Impacting Cloud Models

- Audit Impact & Considerations

- Application criticality

- Cloud provider SLA contracts

Finance

- Cloud Computing Business Case

- Chargeback Metrics & Models

p

- Conformance to Standards, Continuous Improvement

Process

- Impact on IT Service Management Processes

- Change, Release, Config - Incident, Problem

Technology

- Technology Integration

- Technology Architecture Standardization

- POC Review - Application Rationalization - Capacity Provisioning - Vendor Management - Process Metrics - Technology Standardization Organization

- Operating in the Cloud - Organizational Changes

(24)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

Implementation Approach

Implementation

Roadmap

Implementation Approach

Consolidation &

Virtualisation

Automation

Service

Operationalisation

Prioritisation of

Cloud Services**

Infrastructure-as-a-Service cloud

offering

• Consolidation of server,

storage, and network

resources by utilising

virtualisation technology.

• Identification of cloud

service requirements

which consists of

technical and functional

requirements.

• Integration of

management tools that

manages all resources

(server, storage,

network) as a single

Platform-as-a-Service cloud

offering

• Comprehensive

virtualisation management:

o

Configuration

management

C

it

l

i

requirements.

• Integration of a web portal

with the cloud resource

management tools to offer

cloud services to public

network) as a single

pool that can be

allocated on demand.

Software-as-a-Service cloud

offering

o

Capacity planning

o

Performance monitoring

o

Real-time automation

cloud services to public

sector agencies.

offering

**Prioritisation will be based on factors such as service estimated utilisation, service provisioning complexity and infrastructure readiness.

(25)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

Responsibilities

Responsibilities of MAMPU

T t bli h k ithi th J t k I f t kt ICT f th l d ti i iti ti f j t di ti

y To establish a work group within the Jawatankuasa Infrastruktur ICT for the cloud computing initiative for project coordination and monitoring.

y To review and/or develop policies related to governance, procurement, chargeback, service provisioning, security, service t d ti l t f th Cl d C ti i f t t

management and operational aspects of the Cloud Computing infrastructure.

y To develop a change management and communication plan to establish the buy-in from agencies to utilise the services provided within the cloud.

y To develop a comprehensive cloud computing strategy and plan which covers but not limited to identification of cloud services, development of technical implementation plan, development of standards roadmap, identification of security policy issues, service acquisition and provisioning roadmap, development of detailed technical cloud architecture.

y To develop comprehensive marketing plan that focuses on creating awareness and encouraging agencies to use the cloud

y To develop comprehensive marketing plan that focuses on creating awareness and encouraging agencies to use the cloud services offered.

(26)

Strategy 3: Establishment of Public Sector Cloud Computing Infrastructure

Responsibilities

Responsibilities of Agencies

y To support the consolidation of Public Sector network and data centres initiatives which are the key enablers to the cloud computing initiative.

y To be involved in the cloud services requirement study and development to ensure services provided meet theq y p p Agency’s need, requirements and expectations.

y To review Agency-level policies and procedures to support the utilisation of cloud computing technology.

T d l h t l f th A t dd i ti l h d t th tili ti f l d

y To develop change management plan for the Agency to address organisational changes due to the utilisation of cloud computing.

(27)
(28)

Strategy 4: Standardise End-User Computing Infrastructure

• Baseline requirement of ICT infrastructure for all public sector agencies.

• Each agency places of work should have access to PCs and printers,

official email, Internet, office application and end-point security (e.g.

antivirus & personal firewall).

• Common desktop platform and centralised ICT procurement.

S

&

f

f

• Standard hardware & software maintenance policy framework.

• Integration of Green ICT practices.

Key Benefits

• Agencies infrastructure will be at par with latest

technology standards and best practices.

• Increased efficiency in deployment and

maintenance.

• Greater assurance of up to date end-point security.

• Reduced procurement costs through economies of

scale.

(29)

Strategy 4: Standardise End-User Computing Infrastructure

Implementation Approach

Implementation

Roadmap

Implementation Approach

Develop Baseline

Requirements

Policy

Development

EUC

Infrastructure

Standardisation

Prioritisation of

agency EUC

standardisation**

St

d di

th ICT

Federal agency

EUC

standardisation

• Develop baseline

requirements of ICT

infrastructure for public

sector agency.

• Development of policies

including for procurement

and lifecycle

management for ICT

infrastructure within the

• Standardise the ICT

infrastructure

management and lifecycle

across all public sector

agencies.

Local Authority

EUC

standardisation

• Establish technology and

technical standards for

ICT infrastructure within

the public sector that are

based on various agency

infrastructure within the

public sector.

• Establish a centralised

ICT infrastructure

lifecycle management

g

• Assessment of agencies’

ICT infrastructure

environment to identify the

requirements for the

State agency EUC

standardisation

based on various agency

and user requirements.

lifecycle management

processes .

requirements for the

development of roll-out

plan.

(30)

Strategy 4: Standardise End-User Computing Infrastructure

Responsibilities

Responsibilities of MAMPU

y To publish policy and establish centralised governance structure and processes to manage the standardisation of end-userTo publish policy and establish centralised governance structure and processes to manage the standardisation of end user computing infrastructure.

y To define policies, procedures, processes and standards related to end user computing standardisation.

y To execute its role as the technical advisor to the Ministry of Finance and Public Sector Agencies for the development and implementation of the standardized end user computing.

y To identify a baseline requirement for the Public Sector end user computing infrastructure software and hardware technology, and to develop an EUC baseline standard for the Public Sector

and to develop an EUC baseline standard for the Public Sector.

y To advise Ministry of Finance on the Public Sector EUC technical standards and the appointment of panel of vendors to supply EUC infrastructure.

T f j t t d it i f th t d d i l t ti i l di f t

y To perform project management and monitoring of the standards implementation, including performance measurement processes to identify targets and key accomplishments, plus impact assessment studies for benefits realisation.

y To develop a plan for phased implementation of the standardisation of end user computing infrastructure and integration with Public Sector Agencies’ current environment

(31)

Strategy 4: Standardise End-User Computing Infrastructure

Responsibilities

Responsibilities of Ministry of Finance

y To define policies, processes and procedures for the procurement of Public Sector end user computing infrastructure.

y To appoint a panel of vendors to supply EUC infrastructure and to provide an online ordering mechanism for Agencies to access and order EUC infrastructure based on its requirements

access and order EUC infrastructure based on its requirements.

Responsibilities of Public Sector Agencies Responsibilities of Public Sector Agencies

y To conduct an assessment of the Agencies’ specific business requirements and identify any possible specialised end user computing requirements.

T d l h t l f th A t dd i ti l h d t th t d di ti f

y To develop change management plan for the Agency to address organisational changes due to the standardisation of end user computing environment.

(32)

End User Computing Guideline – Proposed Specification

Specifications

Processor– Multi Core x86 architecture with support for 64 Bit Computing, minimum 1.8 GHZ

Input / Output Ports Minimum 2x USB 2 0 ports

Specifications

Processor– Multi Core x86 architecture with support for 64 Bit Computing, minimum 2.2GHz

Input / Output Ports Minimum 4x USB 2 0 ports

Input / Output Ports– Minimum 2x USB 2.0 ports

Motherboard– Integrated sound and network features, Supports 2x USB2.0 ports

RAM –Minimum 2GB DDR2

H d Di k D i Mi i 160GB t SATAII d

Input / Output Ports– Minimum 4x USB 2.0 ports

Motherboard– Integrated sound and network features, supports 4x USB2.0 ports

RAM –Minimum 4GB DDR2

H d Di k D i Mi i 320GB S t SATAII d 8MB

Hard Disk Drive –Minimum 160GB, supports SATAII and 8MB Cache

Optical Drive– Internal Rewritable DVD Drive, Minimum x8 Speed

High

Hard Disk Drive –Minimum 320GB, Supports SATAII and 8MB Cache

Optical Drive– Internal Rewritable DVD Drive, Minimum x16 Speed

Basic System

Video Adapter– Minimum 64MB shared Video Memory, supports minimum resolution of 1280x1024

Network Interface– 10/100/1000 Ethernet LAN and / or 802.11b/g wireless WIFI adapter

High End System

Video Adapter– Minimum 128MB dedicated video memory, supports minimum resolution of 1280x1024

Network Interface –10/100/1000 Ethernet LAN and / or 802.11b/g wireless WIFI adapter

Software– Operating System, Office Automation Application, Personal Security (Anti-Virus and Firewall), Internet Browser and Email Client. Use Open Source Software where possible.

Keyboard and Mouse– QWERTY 101 Keyboard and

Software –Operating System, Office Automation Application, Personal Security (Anti-Virus and Firewall), Internet Browser and Email Client. Use Open Source Software where possible.

Keyboard and Mouse– QWERTY 101 Keyboard and Optical

15 November 2011

TITLE 31

Optical Scroll Mouse

Warranty– All hardware and software must have a minimum of twelve (12) months parts and labour warranty from the date

Scroll Mouse

Warranty –All hardware and software must have a minimum of twelve (12) months parts and labour warranty from the date of

(33)

End User Computing Guideline

EUC User Classification

End User Level EUC Classification

Recommended for top level management:

Top Level Management

(Head of Division and

Above)

• High End Laptop

• Basic Desktop

• Mobile Smart PhoneMobile Smart Phone

Management (Grade 41 and

above)

Recommended for management level staff from grade 41 and above:

• Basic Laptop or Desktop*

Recommended for professionals with work requirements for high computing resources:

• High End Laptop or Desktop*

) Basic Laptop or Desktop High End Laptop or Desktop

Operational / Administrative /

Recommended for ICT facing clerical / administrative staff, operational staff, helpdesk staff, and ICT facing technical staff from grade 41 and below:

(34)
(35)

Strategy 5: Development of Common Security Infrastructure

Centralised Security

Management

• A centralised log and security event management infrastructure.

• Enabling the automation of log aggregation, correlation, and intelligent

analysis centrally to accelerate recognition & response to incidents

analysis centrally, to accelerate recognition & response to incidents.

Federated Identity &

• Federated identity management with a portable identity concept.

• Seamless navigation between different applications while maintaining a

Federated Identity &

Access Management

Seamless navigation between different applications while maintaining a

single login identity.

• Integration of current PKI services into the Federated IAM framework.

C

f

f

f

f

f

Data Leakage

Protection

• Classification of data to identify the sensitivity of information transmitted

through electronic channels.

• Establishment of policies and processes to manage the data lifecycle and

prevent unauthorised data movement.

Key Benefits

• Strengthens the overall public sector ICT security.

• Cost effectiveness in ICT security infrastructure

• Centralised reporting for compliance and

eliminating vulnerabilities.

• Cost effectiveness in ICT security infrastructure

(36)

Strategy 5: Development of Common Security Infrastructure

Implementation Approach

Implementation

Roadmap

Develop Centralised

Implementation Approach

Develop Centralised

Platform

Integration

Operation

• Development of the

centralised security

• Establish plan for

implementing the

• Establish standard

operating procedures for

Prioritisation of

agency IAM & DLP

integration **

management tools & DLP

solution to integrate the

security & data leakage

detection and incident

handling mechanism

Federated IAM & DLP

solution to agency sites.

• Assessment of agency

applications to identify the

i t

ti

i

t

the security & data

leakage detection and

incident handling through

the centralised security

management platform &

Federal agency

IAM & DLP

integration

handling mechanism.

• Development of the

Federated IAM standard

platform to unify the

provisioning and

integration requirements

with the Federated IAM

platform & DLP solution.

• Integration of agency

applications / end user

management platform &

DLP solution.

• Establish standard

operating procedures for

the provisioning and

Local Authority IAM

& DLP integration

p

g

management of identity in

the public sector.

applications / end user

computing environment

with the Federated IAM

platform & DLP solution.

p

g

management of identity

through the Federated

IAM platform.

State agency IAM &

DLP integration

© 2011 KPMG, a company incorporated under the Malaysian Companies Act 1965 and a member firm of the KPMG 35

**Prioritisation will be based on factors such as application identity mapping requirements, application readiness and integration value.

(37)

Strategy 5: Development of Common Security Infrastructure

Responsibilities

Responsibilities of MAMPU

y To establish a work group within the Jawatankuasa Infrastruktur ICT for the centralised security management initiative for project coordination and monitoring

project coordination and monitoring.

y To define and establish the criteria for assessment of ICT Security & Compliance in the Public Sector based on MS ISO/IEC 27001:2007.

T d l t ti t l f th f ti diti f ICT S it f P bli S t A i

y To develop automation tools for the purpose of continuous auditing of ICT Security for Public Sector Agencies.

y To develop the policies related to the governance, management and operational aspects of the Centralised Security Management infrastructure.

y To develop the policies related to the governance, management and operational aspects of the Federated Identity and Access Management infrastructure.

y To develop a change management plan to establish the buy-in from Agencies for the implementation of the Federated IAM framework across Public Sector and integration of the Federated IAM into Agencies’ applications

framework across Public Sector and integration of the Federated IAM into Agencies applications.

y To conduct an assessment framework for Agencies’ applications with a high-value and high-impact for the implementation of the Federated IAM framework.

y To develop a Federated IAM platform solution as a shared service which integrates with the identity repositories of Agency

(38)

Strategy 5: Development of Common Security Infrastructure

Responsibilities

Responsibilities of MAMPU

y To develop a plan for phased implementation of Federated IAM and integration with Public Sector applications including

y To develop a plan for phased implementation of Federated IAM and integration with Public Sector applications including enterprise-wide (EG) applications, community applications and Agency-specific applications.

y To develop a change management plan to establish the buy-in from Agencies for the implementation of the Data Leakage Prevention framework.

y To conduct an assessment framework for Agencies to identify data classification, location and pathways within the Agencies.

y To establish high level policies for data leakage prevention including defining the specific classifications handlingTo establish high level policies for data leakage prevention including defining the specific classifications, handling mechanism of each data category, violation actions and escalation processes.

(39)

Strategy 5: Development of Common Security Infrastructure

Responsibilities

Responsibilities of Agencies

y To conduct an assessment of the agencies’ applications according to the assessment framework to study the impact and value of the integration and implementation of the Federated IAM framework.

y To assist in integration of the Federated IAM platform into the agency’s application

y To assist in integration of the Federated IAM platform into the agency s application.

y To assist in integration of the Data Leakage Prevention platform into the Agency’s application and end-user computing environment.

(40)

Common Security Infrastructure Guideline

(41)

Common Security Infrastructure Guideline

(42)

Common Security Infrastructure Guideline

(43)

Strategy 6: Deployment of Mobile Computing Solutions

• Development of backend infrastructure to support mobile

computing technologies

computing technologies.

• Development of mobile applications to enhance

government service delivery.

• Enabling business/ citizens as well as government

g

g

employees to access and use government services and

applications anytime, anywhere and anyhow.

Key Benefits

• Access to government applications and services anytime

• Increase operational efficiency and

productivity

• Access to government applications and services anytime,

anywhere and anyhow.

• Increase delivery of services through various service delivery

channels.

productivity.

(44)

Strategy 6: Deployment of Mobile Computing Solutions

Implementation Approach

Develop Backend

Develop Mobile

Operation

Implementation

Roadmap

Implementation Approach

p

Infrastructure

p

Applications

Operation

• Conduct assessment on

agency’s mobility

i

t Id

tit

• Identify mobile

applications to be

• Staging of mobile

devices to apply

t

d d

tti

d

Prioritisation of

agency mobile

computing

deployment**

requirement. Identity

strategic initiatives that can

be best resolved with

mobility.

• Identify government mobility

pp

developed based on

value to the citizen,

businesses and

government employees.

standard settings and

installation of

applications.

• Establish centralised

management of the

Federal agency

deployment

• Identify government mobility

strategy based on above

assessment. Strategy

should include addressing

security concerns.

• Development of mobile

applications based on

potential utilisation.

management of the

mobile devices that

includes device

monitoring, automatic

patch and security

Local Authority

deployment

• Develop backend

infrastructure that is able to

support various technologies

in mobile computing.

updates.

State agency

deployment

(45)

Strategy 6: Deployment of Mobile Computing Solutions

Responsibilities

Responsibilities of MAMPU

y To establish a work group within the Jawatankuasa Infrastruktur ICT for the public sector mobile computing initiative for project coordination and monitoring

project coordination and monitoring.

y To identify the requirements of the agencies with regards to information flow and mobility to develop the requirements of the mobile computing solution for citizen and business service delivery.

T id tif th i t f th bli t bilit ki i t t d l th bil ti l ti f

y To identify the requirements of the public sector mobility working requirement to develop the mobile computing solution for increasing productivity of public sector employees.

y To develop the backend infrastructure to support mobile computing technologies in a robust and high-performance environment

environment.

y To develop a mobile computing solution as a shared service to be used across public sector agencies.

y To revise and update the relevant policies with regards to public sector mobility requirements and facilitating the use of bil ti ithi th bli t

mobile computing within the public sector.

Responsibilities of Agencies

y To conduct an assessment of the agencies’ applications and gather the relevant information requirements for introducing mobile services

(46)
(47)

Strategy 7: Increasing Usage of Open Source

• Adopt usage of open source software wherever it gives the best value

for money in delivering public services.

I

i

bli

IT

l’

• Increasing public sector IT personnel’s exposure to open source

standards.

• Government uses open standards in its procurement specifications and

requires all future solutions to comply with open standards.

• Integration of open source with infrastructure related solutions and tools

such as government cloud and mobile applications.

Key Benefits

• Cost savings delivered via the reuse of

applications and solutions

• Increased

potential

for

further

development

and

customization of IT solutions within the public sector.

Minimal licensing and de elopment costs

applications and solutions.

• Avoidance to being locked in to costly proprietary

software.

• Minimal licensing and development costs.

• Maximized accessibility to OSS solutions across

agencies.

(48)

Strategy 7: Increasing Usage of Open Source

Implementation Approach

Implementation

Roadmap

Implementation Approach

Identify OSS Solutions

Strategy

Development

OSS

Standardisation

Achieve targets in

OSS Master Plan II

OSS offered in a

mobile computing

environment

• Identify Solution Areas

of ICT infrastructure to

be implemented.

• Identify OSS initiatives,

• Establish OSS personnel

development and

awareness initiatives

across agencies.

• Standardise OSS adoption

within the ICT

infrastructure management

and lifecycle across all

public sector agencies

OSS offered in a

cloud computing

environment

y

,

agencies involved and

OSS migration

processes for the ICT

infrastructure within the

public sector based on

• Integrate OSS into

government mobile &

cloud computing

infrastructure to facilitate

accessibility

public sector agencies.

• Perform reviews,

enhancements and

accelerated development

of OSS initiatives to ensure

environment

public sector based on

various agency and

user requirements.

accessibility.

of OSS initiatives to ensure

continuity.

(49)

Strategy 7: Increasing Usage of Open Source

Responsibilities

Responsibilities of MAMPU

y To conduct feasibility study to identify opportunities to develop and use open source software to support centralisedy y y pp p p pp infrastructure management and operation.

y To develop and specify OSS related standards, guidelines and policies for all public sector OSS implementations.

y To facilitate, coordinate, advice and assist all public sector agencies for OSS related implementation.

y To conduct and coordinate OSS training, certification and awareness initiatives for public sector ICT personnel. T d t f ilit t d it OSS h d d l t i iti ti

y To conduct, facilitate and monitor OSS research and development initiatives.

y To create and maintain OSS knowledge bank for the sharing of OSS related knowledge and experience.

y To provide technical support to all public sector agencies for all OSS implementation.p pp p g p

y To identify suitable common OSS ICT infrastructure management tools for development and implementation across the public sector.

(50)

Strategy 7: Increasing Usage of Open Source

Responsibilities

Responsibilities of Agencies

y To comply with OSS standards, guidelines and policies for every possible ICT infrastructure implementation.

y To consider OSS in all ICT infrastructure procurement, lifecycle management and processes.

(51)
(52)
(53)

ICT Infrastructure Roadmap

Pilot Projects

Establish pilot project for Public Sector Network,

Cloud Computing Infrastructure, End-User

Computing Standardisation and Mobile Computing

0-1 years

Consolidation of Data Centers within Putrajaya &

deployment.

Consolidation of Data Centers within Putrajaya &

Klang Valley areas (Federal agencies).

Development of Federated Identity and Access

Management to selected agencies.

Public

Sector ICT

I f

t

t

Complete consolidation of the

1-2 years

Infrastructure

Integration

Public

Sector ICT

Infrastructure

p

Public Sector Network.

Expansion of cloud

computing services.

Consolidation of regional

Data Centers

2-5 years

Optimisation

Data Centers.

Provisioning of

Infrastructure as a

Infrastructure as a

(54)

ICT Infrastructure Implementation Plan

Project Phases Plateau 1

( 12 Months ) Plateau 2 ( 18 Months) Plateau 3 ( 18 Months) Plateau 4 ( 12 Months ) C lid ti f P bli S t N t k Infrastructure Architecture

Standardise End User Computing Infrastructure

Establishment of Public Sector Cloud Computing Infrastructure Consolidation of Data Centre and Disaster Recovery Centre

Development of Common Security Infrastructure Consolidation of Public Sector Network

Strategic Roadmap

Infrastructure Architecture

Increasing Usage of Open Source

Deployment of Mobile Computing Solutions Development of Common Security Infrastructure

Change Management Year 2011 2012 2013 2014 2015

u

1

u

2

u

3

u

4

Monitoring and

Platea

u

Establishing the governance structure and processes as well as Pilot Projects

for the strategies

Platea

u

Deployment of initiatives to federal and front

line agencies

Platea

u

Deployment of the

initiatives to the remaining federal, state and local government agencies

Platea

u

Monitoring and ensuring continuous improvement of the infrastructure management and operations ope at o s
(55)

“To – Be” Governance Model –

ICT I f

(56)

“To-Be” Governance Structure – ICT Infrastructure

Steering Committee

Jawatankuasa ICT

Sektor Awam (JISA)

Coordinating Committee

Plan, monitor and coordinate the

development of ICT infrastructure.

Recommend relevant policies, standards and strategies to JISA

Jawatankuasa

Perlaksanaan dan

Koordinasi Program

Working Committee

and strategies to JISA.

Report on the status of development and progress of ICT infrastructure projects

Monitor and coordinate the

Koordinasi Program

ICT

g

implementation and operation of network infrastructure, DC, DRC and Cloud

Computing infrastructure; and

Resolve implementation and operational issues.

Jawatankuasa

Infrastruktur ICT

Manage the day to day operation and service provisioning related to public sector ICT infrastructure.

Management & Operations

Centralised

Management &

Operation Entiity

(57)

“To-Be” Governance Structure – ICT Infrastructure

• Centralised Management & Operation Entity coordinates procurement services from service providers

& provisioning of services to agencies.

Provider A

Provider B

Provider C

• Standardised

procurement and

Infrastructure Standards Agreement

e ement Infrastructure Provisioning Agreement

service level

agreements across

public sector.

• Centralised budget for

Centralised Management & Operation Entiity

e

rvice Level Agr

e Infrastructure Procurement

g

public sector

infrastructure

provisioning.

• Centralised monitoring

Ministry

Agency

State

PBT

Agency

Agency

S e

Agreement

Centralised monitoring

of service provision

including service levels

& infrastructure

(58)

Summary and Moving Forward

Summary and Moving Forward

Plans

(59)

Summary and Moving Forward Plans

Objective

To increase public sector productivity, add value to services and improve efficiencies through a

whole-of-government approach on ICT infrastructure.

Strategy

Consolidation

Establishment of Public Consolidation of

Data Centres Standardise Development Deployment

Consolidation of Public Sector Network of Public Sector Cloud Computing Infrastructure Data Centres and Disaster Recovery Centres End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Source

Moving Forward:

• Establishment of governance structure in the form of Jawatankuasa Infrastruktur ICT and Centralised Mgmt

• Establishment of governance structure in the form of Jawatankuasa Infrastruktur ICT and Centralised Mgmt

and Operation Entity;

• Development of detail implementation plan for each program which include conducting requirement study and

developing technical design; and

(60)

Summary

Strategy #3 : Establishment f Cl d C ti

Strategy #7: Increasing Usage of Open Source

of Cloud Computing Infrastructure

Strategy #6: Deployment of Mobile Computing Solutions

Strategy #2: Consolidation of DC and DRC Strategy #5: Development of Common Security Infrastructure Strategy #1: Consolidation of Public Sector Network S #4 S d di i f E d U Strategy #4: Standardisation of End User Computing Infrastructure

(61)

Q&A Session

References

Related documents