Promoting trusted and responsible cloud computing for government

Resources

SafeGov.org has compiled a list of resources and links as a service for our readers. The following material provides more detailed information on cloud computing for public sector customers. If you have ideas for additional links, please feel free to contact us with your feedback.

Government Resources and Links

Bring Your Own Device: A Toolkit to Support Federal Agencies Implementing Bring Your Own Device (BYOD) Programs - Chief Information Officers Council
Clarifications Regarding the U.S.-EU Safe Harbor Framework and Cloud Computing -U.S. Department of Commerce International Trade Administration
Cloud Computing: Constitutional and Statutory Privacy Protections - Congressional Research Service
Cloud Computing in the Federal Government - GSA’s Office of Citizen Services and Innovative Technologies and the Federal Web Managers Council
Cloud Computing Security Reference Architecture (Draft Special Publication 500-299) - National Institute of Standards and Technology
Cloud Computing Synopsis and Recommendations (Special Publication 800-146) - National Institute of Standards and Technology
Complying with COPPA: Frequently Asked Questions (revised April 2013) - FTC Bureau of Consumer Protection
Computer Security Incident Handling Guide (Special Publication 800-61) - National Institute of Standards and Technology
Creating Effective Cloud Computing Contracts for the Federal Government Best Practices for Acquiring IT as a Service - Chief Information Officers Council
Definition of Cloud Computing (Special Publication 800-145) - National Institute of Standards and Technology
Digital Government: Building A 21st Century Platform To Better Serve The American People - The White House
Federal Information Security Management Act
Guidance on the use of cloud computing - UK Information Commissioner's Office
Guide to Bluetooth (Special Publication 800-121) - National Institute of Standards and Technology
Guide to Understanding FedRAMP - General Services Administration
Guidelines for Managing and Securing Mobile Devices in the Enterprise (Special Publication 800-124) - National Institute of Standards and Technology
Guidelines on Security and Privacy in Public Cloud Computing (Special Publication 800-144) - National Institute of Standards and Technology
Health Insurance Portability and Accountability Act of 1996
Management of Federal Information Resources - Office of Management and Budget
Mobile Security Reference Architecture - Federal CIO Council, Department of Homeland Security, National Protection and Program Directorate, Office of Cybersecurity and Communications, Federal Network Resiliance
Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance - July 2012 Information Technology Laboratory National Institute of Standards and Technology Bulletin
Security and Privacy Controls for Federal Information Systems and Organizations (Special Publication 800-53 Revision 4) - National Institute of Standards and Technology
Trusted Geolocation in the Cloud: Proof of Concept Implementation (Draft NIST Interagency Report 7904) - NIST
When Cloud Computing Makes Sense - General Services Administration

Third-Party Resources and Links

2011 Data Breach Investigations Report - Verizon RISK Team
2012 Data Breach Investigations Report - Verizon RISK Team
2013 Data Breach Investigations Report - Verizon RISK Team
2013 Internet Security Threat Report - Symantec
Capitals in the Clouds - The Case for Cloud Computing in State Government Part I: Definitions and Principles - NASCIO
Capitals in the Clouds - The Case for Cloud Computing in State Government Part II: Challenges and Opportunities to Get Your Data Right - NASCIO
Capitals in the Clouds Part III – Recommendations for Mitigating Risks: Jurisdictional, Contracting and Service Levels - NASCIO
Capitals in the Clouds Part IV – Cloud Security: On Mission and Means - NASCIO
Capitals in the Clouds Part V – Cloud Security: Advice from the Trenches on Managing the Risk of Free File Sharing Cloud Services - NASCIO
Cloud Computing 101: A Brief Introduction - Citizens Against Government Waste
Cloud Computing 201: Guidelines for Successful Cloud Investments - Citizens Against Government Waste
Cloud First Buyers’ Guide for Government
The Cloud Imperative Better Collaboration Better Service Better Cost - A Comprehensive Guide for Best Practices in Cloud Computing for State and Local Governments - TechAmerica
Cloud Security Guidance: Recommendations for the Implementation of Cloud Security - IBM
Getting Secure in the Cloud - Lockheed Martin
How and When to Move Government Agencies Into the Cloud – A Decision Guide for Federal CIOs - Business Software Alliance
An Introduction to Cloud Computing in the Federal Public Sector - Apptis
Mitigating Risks in the Application of Cloud Computing in Law Enforcement - IBM Center for The Business of Government and Paul Wormeli, IJIS Institute
Practical Guide to Cloud Computing - Clouds Standards Customer Council
Six questions every government executive should ask about cloud computing - Accenture
Steps to Improve Cloud Computing in the Public Sector - Brookings Institute

Tutorials and Videos

Cloud Computing Explained - GSA
Cloud Computing for Public Sector - SafeGov.org
The App from Hell - TeachPrivacy.com

SafeGov.org Resources and Links