Aquaboutic | Focus Security Research | Vulnerability Exploit | POC

Home

ministry of industry and information technology printed and issued the implementation guide for promoting enterprises to go to cloud (2018)

Posted by deeson at 2020-03-25
all

Notice of the Ministry of industry and information technology on printing and distributing the implementation guide for promoting enterprises to go to the cloud (2018-2020)

Gxss [2018] No. 135

Departments in charge of industry and information technology of all provinces, autonomous regions, municipalities directly under the central government, cities specifically designated in the state plan and Xinjiang production and Construction Corps:

To implement the State Council's opinions on promoting the development of cloud computing innovation and cultivating new formats of information industry, the State Council's Guiding Opinions on deepening the development of the industrial Internet in the Internet plus advanced manufacturing industry, the deployment plan of the three year action plan for Cloud Computing Development (2017-2019 years) and other deployment requirements, and promoting the use of cloud computing to accelerate the transformation of digitalization, networking and intellectualization. The Internet, big data, artificial intelligence and the real economy are deeply integrated. Now, the implementation guide for promoting enterprises to go to the cloud (2018-2020) is printed and distributed to you. Please carefully organize the implementation in combination with the actual situation of each region.    

Ministry of industry and information technology

July 23, 2018

Implementation Guide for promoting enterprises to go to cloud (2018-2020)

Cloud computing is the concentrated embodiment of the development of information technology and the innovation of service mode, and it is also an important change and inevitable trend of information development. Supporting enterprises to go to the cloud is conducive to accelerating the transformation of digitalization, networking and intelligence, improving innovation ability, business strength and development level; accelerating the development of software and information technology service industry, deepening supply side structural reform, promoting the deep integration of Internet, big data, artificial intelligence and real economy, and accelerating the construction of modern economic system.  

1、 General requirements

The Ministry of industry and information technology shall coordinate the work of Enterprise Cloud access as a whole, organize the formulation and improvement of relevant standards such as the evaluation of Enterprise Cloud access effect, and guide the industry and information technology departments and third-party organizations to coordinate their work. Local industry and information technology authorities should, in combination with local conditions, strengthen the cloud computing platform service and operation capabilities, speed up the promotion of enterprises in key industries to go to the cloud as the focus, improve supporting services as the guarantee, formulate work plans and promotion measures, organize publicity and training, and promote the cloud platform service providers and industry enterprises to strengthen the supply and demand docking and orderly promote Enter the cloud process of the enterprise.

By 2020, we will strive to further optimize the cloud environment for enterprises, significantly improve the awareness and enthusiasm of enterprises in the industry, significantly improve the proportion and depth of cloud application, widely popularize the application of cloud computing in enterprise production, operation and management, add 1 million cloud enterprises nationwide, form more than 100 typical benchmarking application cases, and form a group of influential and dynamic Yunping Platform and Enterprise Cloud experience center.

(1) Enterprises should start from improving their development ability and solving practical business problems. Through the combination of enterprise business and information application, realize the upgrading of information system, promote business innovation, process reconstruction and management reform, accelerate the transformation of digitalization, networking and intelligence, and effectively improve the management level and comprehensive competitiveness of enterprises.

(2) When enterprises carry out the work of cloud access, they can conduct research and analysis from the aspects of cost performance, availability, scalability, security, compliance, etc., and fully assess the cost, benefit, risk and acceptability of using cloud services by using theoretical analysis, simulation experiment, test verification and other methods. On this basis, according to the principle of hierarchical classification, the cloud deployment scheme of information system is planned uniformly.

(3) Enterprises can preferentially choose the information system which has business characteristics and cloud computing characteristics, and has obvious value and benefit. First, the use of information system has obvious high and low peaks, which requires dynamic allocation of resources and elastic expansion. Second, the information system needs to be online quickly and iteratively to improve the speed of business innovation. Third, the information system needs to reduce operation and maintenance costs, improve emergency response, fault recovery, information security capabilities. Fourth, the information system needs to use big data, artificial intelligence and other cloud services to achieve business expansion.

(4) To carry out the work, cloud enterprises, cloud platform service providers, cloud application service providers, system integrators, infrastructure providers, relevant industry organizations and third-party organizations need to strengthen cooperation, clarify the responsibilities of all parties, and jointly promote the implementation. As the main service provider, cloud platform service providers should cooperate with cloud application service providers, system integrators, infrastructure providers and other industry chain stakeholders to provide technical support services for cloud enterprises. Guided by the guide, cloud enterprises steadily promote their own cloud work, and actively use software applications and data services on cloud computing platform to realize digital transformation. Third party organizations actively participate in publicity, implementation, training, testing and evaluation, and strengthen the follow-up research on the cloud work of enterprises.  

2、 Scientific development of deployment model

(5) Large enterprises can establish private cloud and deploy key information systems with high data security requirements; they can deploy information systems connecting customers, suppliers and employees in public cloud, and form a hybrid cloud architecture together with private cloud. For information systems with high data security requirements and external connections and services, a hybrid Cloud Architecture of data storage in private cloud and application deployment in public cloud can be considered.

(6) Small and medium-sized enterprises and entrepreneurial enterprises can rely on the public cloud platform, rent storage, computing, network and other infrastructure resources on demand, apply design, production, marketing, office, finance and other cloud services or build characteristic cloud services, improve the management level and efficiency, accelerate the formation of business capacity, carry out business and service model innovation, achieve personalized service output and accelerate Establish a modern business model.  

3、 Choose cloud services on demand

(7) Infrastructure cloud services. One is computing resource services. Use various elastic computing services of cloud platform to realize centralized management, dynamic allocation, elastic expansion and operation and maintenance load reduction of computing resources. Second, storage resource service. Using block storage, object storage and other cloud storage services of cloud platform to improve the economy, security and reliability of data storage. Third, network resource service. Use the cloud platform's virtual private cloud, virtual private network, load balancing and other network services to make efficient and safe use of cloud platform network resources. Fourth, security services. Use security services such as cloud host security protection, network attack protection, application firewall, key / certificate management, data encryption protection, etc. to improve the information security guarantee ability.

(8) Platform system class service. One is database service. Using the cloud database system, we can realize the cross platform and cross business collaborative management of all kinds of data. Second, big data analysis service. The cloud big data platform is used to promote data resource clustering, data collection, storage, analysis, mining and collaborative application. Third, middleware platform services. Using cloud middleware services, we build distributed system architecture to meet the needs of "Internet plus" transformation. Fourth, Internet of things platform services. The massive Internet of things terminal equipment will be connected to the cloud platform to realize efficient and visual online management of the equipment. Fifth, software development platform services. Through the cloud development platform for software life cycle management, rapid construction of development, testing, operation environment, standardize the development process, reduce costs, improve efficiency. Sixth, artificial intelligence platform services. Use the computing resources of cloud platform to form intelligent service capabilities such as voice recognition, image recognition and face recognition, and improve the level of business intelligence.

(9) Business application services. First, collaborative office services. Use cloud services such as email, meeting and communication to form an office system with low maintenance cost and high service efficiency and improve office efficiency. Second, business management application services. Use cloud services such as enterprise human resource management, administrative management and financial management to improve the scientificity and efficiency of enterprise operation and management. Third, operation management service. Use cloud services such as purchase management, production management, sales management, supply chain management and customer resource management to improve the level of enterprise operation management. Fourth, R & D and design services. Use cloud services such as computer-aided design and product development to deploy the development and design environment in the cloud to improve the R & D efficiency and innovation level. Fifth, production control service. Through MES (Manufacturing Execution System), production data and other systems on the cloud, optimize production control process, improve production efficiency and level. Sixth, intelligent application services. Integrate the overall data of the enterprise, build intelligent applications such as intelligent R & D, intelligent production, intelligent marketing and intelligent service, and improve the level of enterprise intelligence.  

4、 Steadily and orderly promote enterprises to go to the cloud

(10) Enterprises can go to the cloud in accordance with the steps of demand analysis, feasibility assessment, selection and determination of cloud platform service providers, cloud scheme design, test and deployment, verification and summary, operation and maintenance guarantee, effect assessment, etc. Enterprises can choose appropriate steps according to their own reality, appropriately simplify the process, and orderly implement the cloud.

(11) With the support of third-party organizations or cloud platform service providers, enterprises can comprehensively sort out the business types, users, usage characteristics, performance indicators, database usage, and the relationship between systems in combination with their own business development plans.

(12) With the support of the third-party organization or cloud platform service provider, the enterprise can refer to the analysis results of information system, combine the existing information resources and business needs, analyze the cloud basic environment requirements that meet the safe and stable operation of the system from the aspects of business needs, user experience, platform compatibility, cost, security, etc., analyze the feasibility of the information system on the cloud, and make preliminary analysis Determine whether all kinds of systems are going to the cloud and the priority of going to the cloud. Key analysis contents include:

(1) Whether the cloud can improve the development ability of enterprises and solve practical business problems;

(2) Whether the information system is suitable for elastic expansion and needs rapid deployment; whether the cloud platform and application services are compatible with the existing information system; if not, the cost and risk of migration and transformation shall be assessed;

(3) Evaluate whether the data storage mode and data security meet the requirements;

(4) Assess whether the cloud access mode (online / offline, etc.) meets the business requirements, whether the cloud access migration time is within the acceptable business interruption time range, and whether different types of user experience needs can be met after cloud access;

(5) Evaluate the switch scheme, parallel operation scheme, failure rollback scheme, etc. of the existing system and the post cloud system; evaluate the possible risk points in the process of system transformation, data migration and application migration, and give corresponding suggestions.

(13) With the support of cloud platform service providers and based on the conclusion of cloud feasibility assessment, cloud enterprises can formulate detailed cloud work content and requirements, and clarify the responsibilities and obligations of all parties. Fully assess the risk points in the process of migrating to the cloud, develop technical schemes such as application migration, data migration, system transformation, data storage mode and security protection, as well as supporting supervision, acceptance and failure rollback schemes, and do a good job in the cooperation between the cloud information system and the non cloud information system.

(14) The cloud enterprises can define the specific migration strategies of each information system according to the cloud platform service providers or third-party organizations. For the migration of complex systems to the cloud, we need to adopt customized migration technology and methods according to the actual situation. Migration strategies include:

(1) Direct migration: deploy the information system migration to the cloud platform, and use the unified operation management platform for management;

(2) Migration after transformation: the database, system architecture, operating environment, interface, etc. are transformed to meet the technical requirements of migration to the cloud platform;

(3) Purchase cloud service reconstruction: according to the business reality, purchase all kinds of cloud services to meet the needs, and rebuild the information system;

(4) Keep the status quo: for systems that are not suitable for migration temporarily, keep running in the current environment.

(15) With the support of cloud platform service providers or third-party organizations, enterprises can build a simulation environment according to the cloud access scheme, conduct cloud access drills, continuously optimize and improve the cloud access scheme and implement the cloud access process after testing and verification.

(1) Promote the development and test environment on the cloud, and build a simulation environment, including the migration of the source and target environment;

(2) Implement simulated cloud access, function test, performance test, backup test, disaster recovery test, etc., and modify and improve the cloud access scheme on this basis;

(3) Prepare resources including personnel, environment, implementation tools, etc. according to the cloud application plan, implement the cloud application process, carry out data migration and application migration, and implement the rollback plan in case of failure.

(16) After the completion of the cloud access process, all relevant parties can conduct data integrity and consistency verification, perform the functional test, business process test, performance comparison test, backup test, disaster recovery test, security test, etc. after the cloud access, and issue the cloud access test report; formally cut the information system to the cloud platform, and carry out cloud access summary.

(17) After the success of cloud access, cloud access enterprises can supervise cloud services by themselves or entrust a third-party organization, and urge cloud platform service providers to continuously improve their service capabilities. If the service is unavailable or fails to meet the guarantee level, the cloud platform service provider shall compensate according to the content and method agreed in the service agreement to ensure the legitimate rights and interests of the cloud enterprise.

(18) After the enterprise goes to the cloud, it can assess the effect of going to the cloud by itself or by entrusting a third-party organization from the aspects of resource procurement scale and utilization rate, business efficiency improvement, economic and social benefits, etc.

(19) Cloud enterprises can be equipped with corresponding cloud computing talent team, and according to the changes of business operation and organization management brought by cloud, timely adjust and establish the corresponding enterprise organization management mode.  

5、 Improve support service capacity

(20) Cloud platform service providers should speed up the improvement of technical level and service capacity, ensure the efficient, safe and stable operation of cloud platform, work closely with cloud application service providers, system integrators, infrastructure providers, third-party institutions and industry organizations, provide scheme consultation and customized services for cloud enterprises, and expand the coverage of cloud enterprises.

(21) Encourage cloud platform service providers to build a comprehensive, industrial or regional enterprise cloud experience center, systematically display cloud service business content, functional characteristics, typical application cases and cloud effect, and improve users' awareness and application ability of cloud computing. Encourage cloud platform service providers, cloud application developers, system integrators and other organizations to carry out training services and strengthen the construction of professional talent team.

(22) Encourage software and information technology service enterprises to accelerate the transformation to cloud computing, develop and test products, services and solutions based on cloud computing platform according to the differentiated needs of different industries and enterprises, and accelerate the supply of cloud computing products and services. Actively develop various SaaS services such as collaborative office, production management, financial management, marketing management, human resource management, etc., to provide business support for cloud enterprises.  

6、 Strengthen policy guarantee

(23) Encourage local governments, cloud platform service providers, cloud enterprises and other multi-party cooperation and promotion mechanisms. Support local industrial and information departments to set up an enterprise cloud expert advisory committee. We will strengthen the guidance and promotion of enterprises' cloud access, strengthen the interpretation of policies, popularize cloud access knowledge, improve the awareness and practical ability of enterprises' cloud access, and continue to expand the influence of enterprises' cloud access.

(24) Support local industry and information departments to establish and improve public service platforms, and provide enterprises with various services such as information system planning consultation, scheme design, supervision training, etc. Carry out in-depth cloud service capability evaluation and service reliability evaluation, and promote the improvement of cloud computing enterprise service level and service quality. Actively explore and use the insurance mode to guarantee the cloud enterprises.

(25) Encourage all regions to accelerate the development of cloud innovation and entrepreneurship. We will support all kinds of enterprises and entrepreneurs to take cloud computing platform as the basis, and actively cultivate new business forms and models such as platform economy and sharing economy by using new technologies such as big data, Internet of things, artificial intelligence and blockchain.

(26) Formulate and issue the evaluation standards for the effect of Enterprise Cloud access, and gradually build the evaluation system for the effect of Enterprise Cloud access. Support the third-party organizations to evaluate and count the cloud access effects such as cost saving, efficiency improvement, business upgrading and innovation promotion according to relevant standards, and guide enterprises to go to the cloud in depth. Summarize and publicize the typical cases and successful experiences of enterprises going to the cloud, increase promotion efforts, build a benchmark enterprise in the cloud, give full play to the leading role of demonstration, and realize the large-scale promotion of enterprises going to the cloud.

(27) Implement the relevant requirements of the network security law of the people's Republic of China, promote the establishment and improvement of the cloud computing related security management system, and improve the cloud computing network security protection standards. Guide and urge cloud platform service providers to effectively implement the main responsibility to ensure the information security and business secrets of users.

Interpretation of implementation guide for promoting enterprises to go to cloud (2018-2020)

Based on their own business development and information technology application needs, the enterprise cloud is an important way for enterprises to use cloud services such as computing, storage, network, platform and software, optimize production, operation and management, and improve business capacity and development level. Recently, the Ministry of industry and information technology issued the implementation guide for promoting enterprises to go to the cloud (2018-2020) (hereinafter referred to as the Implementation Guide) to guide and promote enterprises to use cloud computing to accelerate the transformation and upgrading of digitalization, networking and intelligence.

1、 Background

The report of the 19th National Congress of the Communist Party of China pointed out that China's economy has changed from a stage of high-speed growth to a stage of high-quality development, and is now in the critical period of transforming the development mode, optimizing the economic structure and transforming the growth momentum. We need to deepen the supply side structural reform, promote the deep integration of the Internet, big data, artificial intelligence and the real economy, and cultivate new growth points and form new momentum.

Cloud computing is a new technology, new mode and new business form to promote the ability of information technology to supply on demand and improve the level of information construction and utilization, and can provide important basic support for the development of Internet, big data, artificial intelligence and other fields. Enterprise Cloud access is an important path for enterprises to follow the development trend of digital economy, accelerate the transformation of digitalization, networking and intelligence, and improve innovation ability, business strength and development level.

First of all, enterprise cloud is conducive to better promoting the popularization and application of various information technologies in enterprises, and accelerating the pace of deep integration of the two in terms of software, platform, network, etc. Secondly, with the help of software applications and data services on the cloud, enterprises can improve the efficiency of production management, optimize business processes, and accelerate the cultivation of new products, models and formats. Third, based on the cloud platform, through information flow to drive technology flow, capital flow, talent flow and material flow, it can effectively integrate and optimize design, production and market resources, realize efficient docking and collaborative innovation of the upstream and downstream of the industrial chain, and reshape production organization and innovation mechanism.

In recent years, with the active innovation in the field of global cloud computing and the development of cloud computing in China entering the stage of application popularization, more and more enterprises have begun to use cloud computing mode to deploy information systems, and the awareness and ability of enterprises on cloud has been continuously enhanced. Some places have introduced policies and measures to promote the cloud access of enterprises, established scientific and effective working mechanisms, and actively explored and promoted the cloud access of enterprises in combination with various forces. But on the whole, enterprises still face many challenges in the cloud. On the one hand, market demand has not been fully released. Enterprises, especially some key industries, still have problems such as "dare not go up, will not go up", which leads to slow progress and limited application level. On the other hand, supporting conditions need to be improved. Application solutions are not rich enough to meet the diversified and personalized needs of enterprises. The standard system for evaluation of cloud access effect of enterprises is not complete, and supporting services such as consultation, training, operation and maintenance services need to be strengthened.

Therefore, it is necessary to formulate implementation guidelines for enterprises to go to the cloud, guide them from the practical level, further unify ideas, form joint forces, optimize the environment, and orderly promote enterprises to go to the cloud nationwide.

2、 General idea

The implementation guide provides guidance for promoting enterprise cloud access from the implementation of cloud access path, strengthening policy support, and improving support services.

In terms of the implementation of the cloud access path, suggestions are put forward on how to choose the deployment mode and cloud access content for enterprises, and references are given to the specific operation steps and precautions of each link in the whole process of cloud access, so as to guide enterprises to reasonably locate, clarify the process and orderly implement cloud access.

In terms of strengthening policy support, the Ministry of industry and information technology and the local competent departments of industry and information technology should be defined, and a good policy environment should be created for enterprises to go to the cloud from the aspects of organizing publicity and training, building a service platform, supporting innovation and entrepreneurship, setting a benchmark demonstration, and strengthening security, so as to promote the docking of supply and demand, and orderly promote the process of enterprises going to the cloud.

In terms of improving support services, we will encourage upstream and downstream of the industrial chain, third-party institutions, industry organizations and other relevant parties to strengthen cooperation, accelerate the improvement of technical level and service capacity, and jointly provide support services for cloud enterprises.

3、 Main content

The implementation guide puts forward the work requirements and implementation suggestions for promoting enterprise cloud access from the aspects of overall requirements, scientific development of deployment mode, reasonable selection of cloud services on demand, safe and orderly implementation of cloud access, improvement of support service capacity, and strengthening of policy support.

1. General requirements. The implementation guide defines the overall work deployment of enterprises' cloud access. The Ministry of industry and information technology coordinates the work of enterprises' cloud access as a whole. The competent departments of industry and information technology of all regions formulate work plans and promotion measures in combination with local reality, so as to orderly promote the process of enterprises' cloud access. The implementation guide puts forward the work goal of Enterprise Cloud access. By 2020, cloud computing will be widely used in enterprise production, operation and management, with 1 million new cloud access enterprises nationwide. The implementation guide puts forward the principles and requirements for enterprises to go to the cloud. Enterprises to go to the cloud should start from improving the development ability of enterprises and solving practical business problems, conduct full research and evaluation, preferentially select information systems that match the business characteristics and cloud computing characteristics, and have obvious value and benefit of going to the cloud, and gradually carry out going to the cloud; enterprises to go to the cloud need to go to the cloud enterprises and cloud platforms to implement going to the cloud Service providers, cloud application service providers, system integrators, infrastructure providers, relevant industry organizations, third-party organizations and other parties should strengthen cooperation and promote jointly.

2. Make a scientific deployment model. For large-scale enterprises, small and medium-sized enterprises, entrepreneurial enterprises and different types of information systems, the implementation guide gives suggestions for the deployment of public cloud, private cloud or hybrid cloud.

3. Reasonably select cloud services as required. The implementation guide lists common cloud service types and functional characteristics from different levels, such as infrastructure, platform system, business application, etc., for enterprises to choose reasonably according to business needs. Infrastructure level, including computing, storage, network, security and other services. Platform system level, including database, big data analysis, middleware platform, Internet of things platform, software development platform, artificial intelligence platform and other services. Application services, including collaborative office, business management, operation management, R & D and design, production control, intelligent application and other services.

4. Implement the cloud in a safe and orderly manner. For the cloud operation process, the implementation guide puts forward the following steps: demand analysis, feasibility assessment, selection and determination of cloud platform service provider, cloud scheme design, test and deployment, verification and summary, operation and maintenance guarantee, effect assessment, etc., and gives relevant guidance and suggestions for the specific operation steps and precautions of each link. Enterprises can select appropriate steps, simplify the process and implement the cloud in an orderly manner based on their own reality.

5. Improve the support service capacity. According to the implementation guide, first, cloud platform service providers should accelerate the improvement of technology level and service capacity, and cooperate with relevant enterprises to provide good services for enterprises to go to the cloud. Second, encourage cloud platform service providers to actively carry out publicity and training through the construction of cloud experience center and other forms. Third, encourage software and information technology service enterprises to take the opportunity of enterprises going to the cloud, accelerate the transformation towards cloud computing, enrich cloud computing products and services, and actively develop various SaaS services.

6. Strengthen policy guarantee. In order to better promote the cloud work of enterprises, the implementation guide puts forward relevant policies and measures. First, encourage all regions to establish a multi-party cooperation promotion mechanism, establish an expert advisory committee, strengthen policy publicity, implementation and interpretation, and popularize cloud knowledge. Second, support the establishment and improvement of public service platform to provide various services for enterprises. Actively explore and use the insurance mode to guarantee the cloud enterprises. Third, encourage the development of "mass entrepreneurship and innovation" on the cloud, and actively cultivate new business forms and models such as platform economy and sharing economy. Fourth, we will formulate and issue evaluation standards for the cloud effect of enterprises, support third-party organizations to evaluate the cloud effect, guide enterprises to go deep into the cloud, summarize and publicize typical cases and successful experiences of enterprises in the cloud, play a leading role in demonstration, and achieve large-scale promotion. Fifth, implement the relevant requirements of the network security law, do a good job in security protection, and ensure the information security of cloud enterprises.