3-1 Cloud Computing Standards Roadmap

NIST Cloud Computing Reference Architecture

A generic high-level conceptual model that serves as a basis for discussing the requirements, structures, and operations of cloud computing.

Cloud Consumer

An individual or organization that acquires and uses cloud products and services.

Cloud Provider

An entity responsible for providing cloud services, including building and managing infrastructure and software.

Cloud Broker

An entity that acts as an intermediary between cloud consumers and cloud providers, managing relationships and value-added services.

Cloud Auditor

An independent party that conducts assessments of cloud services, operations, and security.

Cloud Carrier

An intermediary that provides connectivity and transport of cloud services between consumers and providers.

Service Models

Types of cloud services including Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).

SaaS

Software as a Service; a model where applications are hosted and accessed via the internet.

PaaS

Platform as a Service; a model providing a platform allowing consumers to develop, run, and manage applications without dealing with the infrastructure.

IaaS

Infrastructure as a Service; a cloud service model offering virtualized computing resources over the internet.

Deployment Models

Varieties of cloud deployment including public, private, community, and hybrid clouds.

Public Cloud

A cloud infrastructure made available to the general public over a public network.

Private Cloud

A cloud infrastructure operated exclusively for a single organization.

Community Cloud

A cloud infrastructure shared by several organizations with shared concerns.

Hybrid Cloud

A cloud model combining private and public cloud infrastructures.

Security Auditing

The process of evaluating the effectiveness of security controls to ensure compliance with regulations and requirements.

Service Level Agreement (SLA)

A contract that defines the level of service expected from a cloud provider.

Intermediation

Enhancing a given service by providing additional capabilities or value to cloud consumers.

Arbitrage

The flexibility to choose cloud services from multiple providers.

Privacy Impact Assessment (PIA)

An analysis to assess the privacy risks associated with data collection and processing in a cloud environment.

Personally Identifiable Information (PII)

Information that can be used to trace an individual’s identity, such as name or social security number.

Cloud Service Management

All service-related functions necessary for the management and operation of cloud services.