PAKISTAN CLOUD FIRST POLICY 10.2.2 Interoperability Requirements .................................................................................................... 14 10.2.3 Migration between Cloud Service Providers .............................................................................. 14 10.2.4 Data Ownership .......................................................................................................................... 14 Date of Application and Validity ............................................................................................................. 15 Annex A – Cloud Service Models ........................................................................................................... 16 12.1 Software as a Service (SaaS) ............................................................................................................... 16 12.2 Platform as a Service (PaaS) ............................................................................................................... 16 12.3 Infrastructure as a Service (IaaS) ........................................................................................................ 16 Annex B – Priority of Cloud Service Models .......................................................................................... 17 Annex C – Share of Responsibilities between CSP and PSE .................................................................. 18 Annex D – Data Classification Guidelines .............................................................................................. 19 a. Open Data ........................................................................................................................................... 19 b. Public data ........................................................................................................................................... 19 c. Restricted data ..................................................................................................................................... 19 d. Sensitive/Confidential data ................................................................................................................. 19 e. Secret................................................................................................................................................... 19 Annex E – Cloud Selection Matrix for Government Data ....................................................................... 20 Annex F – Minimum Suggested Requirements for Contracts ................................................................. 21 Page 2 of 21

Select target paragraph3