The Department of Defense and the Power of Cloud Computing: Weighing Acceptable Cost Versus Acceptable Risk
Abstract
Cloud computing, a shared pool of computing resources that are readily available to meet the users rapidly changing demands, has opened up many new opportunities and risks for society that in many ways are revolutionary. The Department of Defense (DOD), because of its size and mission, faces significant opportunities and security challenges when implementing a cloud computing environment. The transformation of DOD information technology (IT) has been uneven as the technology has matured. A cloud-based infrastructure can provide extensive savings for the DOD. Currently, there is an estimated 75 percent underutilization rate in current configurations. However, a cloud configuration introduces new potential security risks that DOD IT professionals must weigh when evaluating the potential cost savings associated with cloud computing. The implementation of a private DOD cloudan infrastructure solely owned and operated by the DOD supporting all DOD componentscould realize savings while reducing or eliminating the risks associated with cloud computing. This paper evaluates existing policy, guidance, law and regulation, and recent efforts within the DOD to implement a cloud computing infrastructure. There are three key recommendations for the DODs transformation to make the most of cloud computing: standardize security categorization, implement a DOD private cloud, and evaluate the most cost-effective commercial cloud solutions with the least security risk.
Document Details
- Document Type
- Technical Report
- Publication Date
- Apr 01, 2016
- Accession Number
- AD1015712
Entities
People
- Steven C. Dudash
Organizations
- Air Command and Staff College