PAKISTAN CLOUD FIRST POLICY 6.3 Cloud Opportunities in Pakistan Pakistan is the 5th most populous country in the world with a population of approximately 220 million. The federal government of Pakistan comprises of more than 40 divisions and more than 600 affiliated departments. Similarly, there are numerous provincial ministries and their affiliated departments in all the provinces of Pakistan . The governments across the globe are increasing their spending on ICT to provide better citizen centric services and increased transparency and accountability. Pakistan is undergoing a digital revolution and has taken numerous initiatives for the provisioning of ICT based solutions. This represents a huge potential for investors to offer cloud-based infrastructure and solutions to GoP. This policy aims to provide a conducive environment to CSP to be a partner of the GoP in its digital transformation journey. Cloud Deployment Models 7.1 Public Cloud • Cloud infrastructure provisioned for open use by the general public. • This cloud model may be owned, managed, and operated by a business, academic, or PSE, or some combination of them. • It can be located anywhere. Resources of the cloud infrastructure can be shared by any number of organizations. 7.2 Government Cloud • • • 7.3 Cloud infrastructure provisioned for use by PSE only. It may be owned, managed, and operated by a business, academic, or PSE, or some combination of them. It can only be located in Pakistan. Resources of the cloud infrastructure can be shared by PSE only. Private Cloud • • • 7.4 Cloud infrastructure provisioned for exclusive use by a single organisation/PSE. It is managed and operated by the organisation, a third party, or some combination of them. It can only be located in Pakistan either on premise or off premise of the organization that owns it. Hybrid Cloud • Hybrid cloud is a solution that combines one or more referred cloud deployment models. • It allows data and applications to be shared between the referred models. An organization can store its sensitive data on one type of cloud whereas public data on another, thus taking care of its security needs as well as leveraging the robust computational resources of a public cloud. Data Sovereignty and Data Flows This policy acknowledges the capabilities and economies of scale obtained when there are no data residency requirements in place. CSP are hyper-scale providers and have data centres around the world. Page 8 of 21