Accession Number : AD1015712

Title :   The Department of Defense and the Power of Cloud Computing: Weighing Acceptable Cost Versus Acceptable Risk

Descriptive Note : Technical Report

Corporate Author : Air Command and Staff College Maxwell AFB United States

Personal Author(s) : Dudash,Steven C

Full Text :

Report Date : 01 Apr 2016

Pagination or Media Count : 51

Abstract : Cloud computing, a shared pool of computing resources that are readily available to meet the users rapidly changing demands, has opened up many new opportunities and risks for society that in many ways are revolutionary. The Department of Defense (DOD), because of its size and mission, faces significant opportunities and security challenges when implementing a cloud computing environment. The transformation of DOD information technology (IT) has been uneven as the technology has matured. A cloud-based infrastructure can provide extensive savings for the DOD. Currently, there is an estimated 75 percent underutilization rate in current configurations. However, a cloud configuration introduces new potential security risks that DOD IT professionals must weigh when evaluating the potential cost savings associated with cloud computing. The implementation of a private DOD cloudan infrastructure solely owned and operated by the DOD supporting all DOD componentscould realize savings while reducing or eliminating the risks associated with cloud computing. This paper evaluates existing policy, guidance, law and regulation, and recent efforts within the DOD to implement a cloud computing infrastructure. There are three key recommendations for the DODs transformation to make the most of cloud computing: standardize security categorization, implement a DOD private cloud, and evaluate the most cost-effective commercial cloud solutions with the least security risk.

Descriptors :   cloud computing , cost effectiveness , information security , computer network security , department of defense , electronic mail , web browsers , internet , information systems , operating systems (computers) , risk analysis

Distribution Statement : APPROVED FOR PUBLIC RELEASE