NIST Cloud Computing Program

NIST Cloud Computing Security Working Group

Information Technology Lab

EXECUTIVE SUMMARY

The National Institute of Standards and Technology (NIST), along with other agencies, was tasked
by the U.S. Chief Information Officer with specific activities aimed at accelerating the adoption of
cloud computing [11]. These include the delivery of a US Government Cloud Computing
Technology Roadmap and the creation of other NIST Special Publications (NIST SPs) that address
the definitions, security aspects, and reference architecture of Cloud Computing. In furtherance of
its statutory responsibilities, NIST has developed a series of Special Publications aimed at
accelerating the Cloud Computing adoption by Federal agencies:

• NIST SP 500-291: Cloud Computing Standards Roadmap
• NIST SP 500-292: NIST Cloud Computing Reference Architecture
• NIST SP 500-293: US Government Cloud Computing Technology Roadmap Volume 1,
High-Priority requirements to Further USG Agency Cloud Computing Adoption
• NIST SP 500-293: US Government Cloud Computing Technology Roadmap Volume II,
Useful Information for Cloud Adopters (Draft)
• NIST SP 500-293: US Government Cloud Computing Technology Roadmap Volume III,
Technical Considerations for USG Cloud Computing Deployment Decisions(Draft)
• NIST SP 800-144: Guidelines on Security and Privacy in Public Cloud Computing,
• NIST SP 800-145: The NIST Definition of Cloud Computing
• NIST SP 800-146: Cloud Computing Synopsis and Recommendations(Draft)

http://collaborate.nist.gov/twiki-cloud-computing/pub/CloudComputing/CloudSecurity/NIST_Security_Reference_Architecture_2013.05.15_v1.0.pdf

National Standards Institute releases Cloud Computing Standards

The National Institute of Standards and Technology (NIST) has been tasked by the U.S. Chief
Information Officer to provide technical leadership for US government (USG) agency efforts
related to the adoption and development of cloud computing standards. The goal is to
accelerate the Federal government’s adoption of secure and effective cloud computing solutions to
reduce costs and improve services. The NIST strategy consists of two parts: (1) build a USG Cloud
Computing Technology Roadmap that focuses on the highest priority USG cloud computing
security, interoperability, and portability requirements; and (2) lead efforts to develop standards and
guidelines in close consultation and collaboration with standards bodies, the private sector, and
other stakeholders.

http://collaborate.nist.gov/twiki-cloud-computing/pub/CloudComputing/CloudSecurity/NIST_Security_Reference_Architecture_2013.05.15_v1.0.pdfhttp://collaborate.nist.gov/twiki-cloud-computing/pub/CloudComputing/CloudSecurity/NIST_Security_Reference_Architecture_2013.05.15_v1.0.pdf