Government Information Assurance Event, 28/29 June 2011

The eleventh Information Assurance event was held in London.

In Autumn 2010 the National Security Strategy identified cyber attacks on national infrastructure among “Tier 1” Security threats. Reflecting the severity of this threat, the UK government plans to spend £650 million over four years on a National Cyber Security Programme (NCSP), to reinforce the nation’s defenses against cyber attack.

Last October the Prime Minister placed cyber security at the top of the national security agenda last. Recognising the importance of Information Assurance in achieving cyber security, the new National Cyber Security Strategy, incorporates the National IA Strategy.

The Government ICT Strategy released earlier this year, is focused specifically on opening up public services and delivering digital by default. The claim made is that the ICT strategy will deliver better public services for less cost through increased openness. But the openness comes with risk, and a safe and trusted environment is essential.

A strong message from all speakers is that the employee is the weakest information security point of the organisation. Education is vital.

New devices are agents of change. Users are becoming empowered in choosing devices and how the devices are used, and this leads to new threats:

Device and data loss

More than half of all users do not lock devices

5-10% of tablets and 15-25% phones lost/stolen each year

Mobile devices predicted to be new malware frontier

Google removed 50 infected Apps from MarketPlace after more than 200k down-loads

User behaviour

Average iPhone has 60 applications downloaded; users more readily download to Smartphones than to laptops.

Greater use of social media

It was stated that there is a serious disconnect between policy and reality and between policy awareness and adherence.

JISC-funded Study of Early Adopters of Cloud Computing and Shared Services

The FEAST report, an overview of the adoption of shared services and cloud computing in universities, which was funded by JISC and has been published recently, is worth a read.

HE has an excellent record in shared services eg purchasing consortia, JANET, UCAS. However many in-house activities are perceived to offer competitive advantage.

The report is aimed and written for VCs, Finance directors etc.

Text copied from the JISC web-page:

Purpose

To conduct a study to identify, explore, document and analyse examples of large-scale shared services and cloud computing implementations for core administrative and related academic systems across universities and colleges in theUK and globally.

To produce models and high quality guidance materials on effective practice around shared services and cloud computing planning and implementation in further and higher education aimed at different stakeholder groups.

Description

This study collated details from more than 250 different projects across the HE sector globally to demonstrate good examples of common frameworks and mutual cooperation, shared services and cloud computing initiatives. 80+ examples relevant to the Further and Higher Education sector (UK or internationally) have been been documented in vignettes and 5 specifically interesting examples have been expanded in to detailed case studies to illustrate the lessons and pitfalls of each project.

HEFCE's Cloud services for education and research – projects and partners announced

HEFCE and JISC have issued a press release giving more details of the UMF funding which was announced last February. It lists the partners involved, including Oxford's projects which will be funded under the programme.

Full text of the release is as follows:

Since announcing a £12.5 million fund in February that aims to help universities and colleges deliver better value for money by working together more effectively, HEFCE and JISC are now able to confirm the projects and partners appointed to deliver the two parts of this work: a national cloud infrastructure and supporting services.

JANET (UK) will deliver the national brokerage to aid procurement of cloud services between higher education institutions and commercial suppliers and Eduserv will provide a pilot cloud infrastructure for higher education institutions. Other partners include De Montfort, Exeter, Edinburgh, Kent, Liverpool John Moores, Oxford, Leicester, Southampton and Sunderland universities (see below).

So that colleges and universities can gain the most benefit from this new cloud-based infrastructure, four new services will be developed to drive its adoption:

• A new specialist team set up by JISC Advance to provide support for procuring and implementing administrative systems and services.
• A shared service to help universities manage the administration of their research operations, from research proposal through to project completion.
• A service to support the secure distribution of graduation documents and transcripts for the benefit of students and prospective employers.
• A service to support libraries in the administration of their electronic resources, which will include the management of their licensing and subscription of electronic journals.

David Sweeney, HEFCE Director – Research, Innovation and Skills, explains the value this suite of work will have once complete, "In the current economic climate all education organisations are looking for further ways to work together, share resources and reduce costs. This programme of work will provide data management and storage services, plus a suite of tools to help universities and colleges, researchers and administrators work more effectively across the research management lifecycle. This will reduce duplication and increase the efficiency of administrative and research processes."

David Utting JISC Director Service Relationships commented, "Cloud-based services have the potential to bring enormous efficiencies and benefits to higher education institutions and we look forward to working with them to realise these. But we acknowledge that it is vital to demonstrate to users the security and robustness of working in an education and research cloud.
"There have been a number of high-profile issues with data being stored in public clouds, which is why we are working with JANET (UK) to deliver a private higher education cloud to ensure universities can trust that their information and data will be secure."

For further information visit here.

1. This £12.5 million is part of the University Modernisation Fund. For further information see ‘Shared services in cloud computing to be funded by HEFCE’

2. Who is involved?
The University of Exeter will lead the Research Management and Administration System (RMAS) work between the universities of Exeter, Kent, and Sunderland to procure, develop and implement a cloud-based research management and administration system based on a need identified by earlier feasibility studies funded by HEFCE.

De Montfort University is developing an enterprise service bus (ESB) solution to demonstrate interoperability between local and cloud systems for shared administrative applications, starting with RMAS.

JISC Collections will manage the electronic resource management support service which builds on work by JISC and the Society of College National and University Libraries (SCONUL).

The Digital Curation Centre (DCC) at University of Edinburgh will develop data management tools and training capability. This will support the production and implementation of data management plans for universities and their researchers to preserve data for sharing, re-use and citation.

A consortium led by Liverpool John Moores University will develop the secure document service. (NB - we're part of this consortium)

Four projects will produce software applications which can be delivered as a service from the cloud. They will support researchers with their work and data management. These are:

• Leicester University is providing support for joint NHS and university research teams working with tissue samples and anonymised patient data.

• The University of Oxford is providing a database to a wide range of researchers in the arts, humanities and other disciplines. Oxford will also provide an integrated set of tools to manage data within Life Sciences and other similar research projects. This will make it easier to submit data for longer-term storage in an appropriate standards compliant data repository.

• The University of Southampton is providing electronic lab data management and collaborations tools.