PAKISTAN CLOUD FIRST POLICY Table of Contents Definitions and Abbreviations ........................................................................................................................ 3 1.1 Cloud Computing .................................................................................................................................. 3 1.2 Cloud Service Provider (CSP)............................................................................................................... 3 1.3 Public Sector Entities (PSE) .................................................................................................................. 3 1.4 Government data ................................................................................................................................... 3 1.5 Interoperability ...................................................................................................................................... 3 1.6 New ICT Investment ............................................................................................................................. 3 1.7 Open Data ............................................................................................................................................. 3 1.8 Service Level Agreement (SLA) ........................................................................................................... 3 1.9 Abbreviations ........................................................................................................................................ 4 Background..................................................................................................................................................... 5 Vision ............................................................................................................................................................. 6 Scope and Adoption........................................................................................................................................ 7 Objectives ....................................................................................................................................................... 7 Current State of Cloud Computing in Pakistan ............................................................................................... 7 6.1 Current ICT Infrastructure landscape .................................................................................................... 7 6.2 Human Resources ................................................................................................................................. 7 6.3 Cloud Opportunities in Pakistan ........................................................................................................... 8 Cloud Deployment Models ............................................................................................................................. 8 7.1 Public Cloud .......................................................................................................................................... 8 7.2 Government Cloud ................................................................................................................................ 8 7.3 Private Cloud......................................................................................................................................... 8 7.4 Hybrid Cloud......................................................................................................................................... 8 Data Sovereignty and Data Flows .................................................................................................................. 8 Policy Deliverables ......................................................................................................................................... 9 Cloud Office .......................................................................................................................................... 9 9.1 9.1.1 Organizational Hierarchy of the Cloud Office ................................................................................. 10 9.2 Accreditation of Cloud Service Providers for Government Data ........................................................ 10 9.3 Registration of Cloud Service Providers ............................................................................................. 11 9.4 ICT Audits ......................................................................................................................................... 11 9.5 Cloud Acquisition Office .................................................................................................................... 11 9.6 Restrictions on Investments in Fragmented ICT infrastructure ........................................................... 11 9.7 Data Classification .............................................................................................................................. 11 9.8 Security Framework ............................................................................................................................ 12 Procurement............................................................................................................................................. 12 10.1 Centralized Procurement ..................................................................................................................... 13 10.2 Contracts with CSP ............................................................................................................................. 14 10.2.1 Service Level Agreements (SLA)............................................................................................... 14 Page 1 of 21

Select target paragraph3