P&P April Issue 2018

Figure 1. Qualitative Comparison of Cloud versus on-Premise Hosting

of cloud versus on-premise as hosting solutions for DR.

[ATC] from the Centers for Medicare and Medicaid Services [CMS], Pilot Entry and Exit Controls, HIPAA Contingency Plan Compliance). This experience, coupled with Deloitte’s role as system integrator on the project, uniquely positioned Deloitte to collaborate with DOJ and its hosting provider to identify considerations for an effective DR solution. Through this collaboration, DOJ determined the following evaluation criteria were necessary in making a decision on hosting a DR solution. Note: Given the similarity in char- acteristics of the three options under on-premise, they were consolidated into a single on-premise model for evaluation against DR as a cloud service. DR in the Cloud Following an extensive evaluation of the information collected for the two DR hosting options, it was determined that hosting DR in the cloud was the right decision for Oregon’s DOJ and Origin. Put simply, leveraging cloud technology allows organizations to focus on their core business processes instead of on IT infrastructure. Figure 1 shows a comparison of some of the qualitative characteristics

legal structure. Certain services may not be available to attest clients under the rules and regulations of public accounting. This publication contains general information only and Deloitte is not, by means of this publication, rendering accounting, business, financial, investment, legal, tax, or other professional advice or services. This publication is not a substitute for such professional advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified professional advisor. Deloitte shall not be responsible for any loss sustained by any person who relies on this publication. Reference Notes 1. Statewide Business Continuity Planning, Policy #107-001-010. www.oregon.gov/ das/Policies/107-001-010.pdf 2. Federal Cloud Computing Strategy. https://www.dhs.gov/sites/default/files/ publications/digital-strategy/federal- cloud-computing-strategy.pdf 3. CMS Cloud Computing Standards. www. cms.gov/Research-Statistics-Data-and- Systems/CMS-Information-Technology/ InformationSecurity/Downloads/RMH_ VIII_32_Cloud_Computing.pdf Copyright © 2018 Deloitte Development LLC. All rights reserved.

TheTakeaway Agencies should envision the DR in cloud hosting effort as a low-risk, high-return launch pad toward realizing their vision of eventually migrating their nonproduction and production IT infrastructure to the cloud. Implementing DR in the cloud provides agencies with a wide variety of potential benefits, ranging from significant reduction in capital expen- diture by leveraging the massive scale discounts offered by public cloud to improvement in robustness of the DR system. To help agencies achieve these benefits, the federal government has instituted a Cloud-First strategy that encourages cloud adoption for new investments. 2 The CMS Computing Standards also recognize the cloud as a reliable disaster recovery envi- ronment for providing business continuity. 3 As used in this document, “Deloitte” means Deloitte Consulting LLP, a subsidiary of Deloitte LLP. Please see www.deloitte.com/ us/about for a detailed description of our

15

April 2018 Policy&Practice