Comment from email: Federal IT Modernization - Request for comments

As requested, here is my feedback on the draft IT modernization plan.

If there are any questions or clarifications required, please do not hesitate to ask.

-tnx,

Jeff

------------------------------------

What are major attributes that are missing from the targeted vision?

· Appendix B: “…emphasizes placing protections closer to the services and information systems in which sensitive data is stored and accessed.” – Recommend that in addition to this, that the boundary or edge security mechanisms be kept in place so as to provide a multi-layer, defense-in-depth environment. Ideally, each layer would implement a different form of security.

· Shared Services to Enable Future Network Architectures: ”…OMB will conduct a data call requesting that agencies identify systems that may be ready for cloud migration…” – In many ways the “Cloud First” policy is not resulting in the expected efficiencies with a move to cloud. This has resulted in too many ‘lift-and-shift’ migrations, leading to continued VM sprawl and does not make systems any less unwieldy. The main thrust of the proposed data call should be to evaluate if the application is ready to move to cloud from an application technology basis and whether it makes financial sense. This process should be encouraging modern application development that leverages technologies like containers and other micro services that enable modular development.

-------------------------------------------------------

Jeffrey LaRue

Cloud Chief Technologist – US Federal

HPE Cloud