cbdc:public:cbdc_omg:04_doc:15_common:50_international:10_residency
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
cbdc:public:cbdc_omg:04_doc:15_common:50_international:10_residency [2022/04/09 20:05] nick created |
cbdc:public:cbdc_omg:04_doc:15_common:50_international:10_residency [2022/06/17 18:16] (current) terrance |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Data Residency ====== | + | ====== 4.6.1 Data Residency ====== |
| - | [[cbdc:private:cbdc_omg:04_doc:15_common:50_international:start | Return to Top]] | + | |< 100% >| |
| + | | [[cbdc:public:cbdc_omg:04_doc:15_common:50_international:start| International Considerations]] | <WRAP> | ||
| + | <html><b> | ||
| + | <a href="mailto:[email protected]?Subject=OMG's CBDC WG Response: | ||
| + | 4.6.1 Data Residency | ||
| - | According to the Cloud Working Group's Discussion Paper on Data Residency(( | + | ">Provide Feedback</a></b> |
| + | </html> | ||
| + | </WRAP> | | ||
| + | |||
| + | According to the OMG Cloud Working Group's Discussion Paper on Data Residency(( | ||
| Cloud Standards Customer Council and the Object Management Group, | Cloud Standards Customer Council and the Object Management Group, | ||
| __Data Residency Challenges__, | __Data Residency Challenges__, | ||
| Line 9: | Line 17: | ||
| Accessed: 8 April 2022, | Accessed: 8 April 2022, | ||
| [[https://www.omg.org/cloud/deliverables/CSCC-Data-Residency-Challenges.pdf]] | [[https://www.omg.org/cloud/deliverables/CSCC-Data-Residency-Challenges.pdf]] | ||
| - | )). The **Data Residency** issues from the **Cloud Working Group Data Residency White Paper** are summarized in Table {{ref>drIssues}} with each issue being give a unique number. | + | )). The **Data Residency** issues from the **Cloud Working Group Data Residency White Paper** are summarized in Table {{ref>drIssues}} with each issue being given a unique number. |
| <table drIssues> | <table drIssues> | ||
| <caption>A review of the Data Residency Issues the CBDC needs to address.</caption> | <caption>A review of the Data Residency Issues the CBDC needs to address.</caption> | ||
| |< 100% 10% 45% 45%>| | |< 100% 10% 45% 45%>| | ||
| - | ^ Data Residency Issue Number ^ Description ^ CBDC Explanation | | + | ^ Data Residency Issue Number ^ Description ^ CBDC Explanation | |
| ^ DR01 ^ <WRAP> | ^ DR01 ^ <WRAP> | ||
| Large multinational companies wish to consolidate data centers from multiple countries into a smaller set of locations (data center consolidation). | Large multinational companies wish to consolidate data centers from multiple countries into a smaller set of locations (data center consolidation). | ||
| </WRAP>|<WRAP> | </WRAP>|<WRAP> | ||
| - | Although a U.S. based CBDC is not a multinational company, it is, by nature, a multinational enterprise. A summary of the multinational nature of the CBDC found in OMG [[cbdc:private:cbdc_omg:04_doc:12_summary:start | White Paper Analysis]] follows: | + | Although a U.S.-based CBDC is not a multinational company, it is, by nature, a multinational enterprise. A summary of the multinational nature of the CBDC found in OMG's CBDC WG [[cbdc:public:cbdc_omg:04_doc:12_summary:start| White Paper Analysis]] follows: |
| - | * **''B0036''** and **''B0042''** set as a "desirement" the preservation the dominance of the U.S. Dollar internationally | + | : 1. **''B0036''** and **''B0042''** set as a "desirement" the preservation the dominance of the U.S. Dollar internationally |
| - | * **''B0009''**, **''B0024''**, **''B0034''**, **''P0026''** express the "need for speed" | + | : 2. **''B0009''**, **''B0024''**, **''B0034''**, **''P0026''** express the "need for speed" |
| - | * **''B0027''** expressed the need for trust and reliability | + | : 3. **''B0027''** expressed the need for trust and reliability |
| - | * **''B0053''** is resiliency | + | : 4. **''B0053''** is resiliency |
| - | * **''B0009''**, **''B0015''**, **''B0035''**, **''B0041''** for the need of cross-boarder operations | + | : 5. **''B0009''**, **''B0015''**, **''B0035''**, **''B0041''** for the need of cross-border operations |
| - | * **''D0009''** to support foreign demand | + | : 6. **''D0009''** to support foreign demand |
| </WRAP>| | </WRAP>| | ||
| - | ^ DR02 ^ <WRAP>Organizations migrate some of their services to the cloud or to a hosted solution managed by an outsourcing company located in another country. “Services” is a very broad term here, and a risk arises simply if a remote backup solution stores the backup data in another country. | + | ^ DR02 ^ <WRAP>Organizations migrate some of their services to the cloud or to a hosted solution managed by an outsourcing company located in another country. “Services” is a very broad term here, and risk arises simply if a remote backup solution stores the backup data in another country. |
| </WRAP>|<WRAP> | </WRAP>|<WRAP> | ||
| - | For the same reasons given in the explanation for **''DR01''** above, the CBDC has an implied "desirement" for cloud based data collection and the redundancy it offers. In addition, **''B0051''** and **''D0011''** both refer to data collection, which can cause Data Residency issues when data is from outside U.S. source. | + | For the same reasons given in the explanation for **''DR01''** above, the CBDC has an implied "desirement" for cloud-based data collection and the redundancy it offers. In addition, **''B0051''**, and **''D0011''** both refer to data collection, which can cause Data Residency issues when data is from outside U.S. sources. |
| </WRAP>| | </WRAP>| | ||
| ^ DR03 ^ <WRAP>A Business Process Outsourcing (BPO) solution, or a managed helpdesk solution, causes agents in a different country to have access to protected information in order to perform the contracted service. | ^ DR03 ^ <WRAP>A Business Process Outsourcing (BPO) solution, or a managed helpdesk solution, causes agents in a different country to have access to protected information in order to perform the contracted service. | ||
| </WRAP>|<WRAP> | </WRAP>|<WRAP> | ||
| - | Figure {{ref>bpoData}} provides a list of the top services to outsource to third Party BPOs. Some of these are relatively benign un terms of the data visibility by BPO employees. Others areas such as //"Information Technology(IT)"// and //"Claims, eligibility, and appeals processing"// might need to be addressed for any CBDC implantation. | + | Figure {{ref>bpoData}} provides a list of the top services to outsource to third Party BPOs. Some of these are relatively benign in terms of data visibility by BPO employees. Other areas such as //"Information Technology(IT)"// and //"Claims, eligibility, and appeals processing"// might need to be addressed for any CBDC implantation. |
| <figure bpoData> | <figure bpoData> | ||
| - | {{ :cbdc:private:cbdc_omg:04_doc:15_common:50_international:screen_shot_2022-04-08_at_2.22.00_pm.png?400 |}} | + | {{ cbdc:04_doc:15_common:50_international:screen_shot_2022-04-08_at_2.22.00_pm.png?400 |}} |
| <caption>Federal Managers report that BPO is used for a wide range of services(( | <caption>Federal Managers report that BPO is used for a wide range of services(( | ||
| Government Business Council, | Government Business Council, | ||
| Line 46: | Line 54: | ||
| ^ DR04 ^ <WRAP>Employees travel across borders, carrying sensitive data with them on their laptops and smartphones. | ^ DR04 ^ <WRAP>Employees travel across borders, carrying sensitive data with them on their laptops and smartphones. | ||
| </WRAP>|<WRAP> | </WRAP>|<WRAP> | ||
| - | For the U.S. CBDC, it is not about employees traveling accross boarders as much as U.S. based citizens and residents traveling across boarder. Even if the people do not travel accross the boarders, their money may tavel thrugh international purchases and remittances. | + | For the U.S. CBDC, it is not about employees traveling across borders as much as U.S.-based citizens and residents traveling across the border. Even if the people do not travel across the borders, their money may travel through international purchases and remittances. |
| </WRAP>| | </WRAP>| | ||
| </table> | </table> | ||
| - | For the CBDC, the Data Residency issues **''DR01''**, **''DR01''** will cause issues if the CBDC obtains international usage and will probably reduce adoption of the U.S. Dollar which are among the stated desirements the Federal Reserve **White Paper**. See Table {{ref>internatDesire}}. | + | For the CBDC, the Data Residency issues **''DR01''**, **''DR01''** will cause issues if the CBDC obtains international usage and will probably reduce adoption of the U.S. Dollar which are among the stated desirements the Federal Reserve **White Paper**. See Table {{ref>internatDesire}}. |
| <table internatDesire> | <table internatDesire> | ||
| <caption>International "desirements" specified in the Federal Reserve **White Paper**.</caption> | <caption>International "desirements" specified in the Federal Reserve **White Paper**.</caption> | ||
| - | |< 100% 10% 45% 45% >| | + | |< 55% 10% 45% >| |
| - | ^ Statement No. ^ Statement ^ | + | ^ Statement No. ^ Statement ^ |
| ^ B0036 ^ Preserve the dominant international role of the U.S. dollar | | ^ B0036 ^ Preserve the dominant international role of the U.S. dollar | | ||
| ^ B0041 ^ Support streamlining cross-border payments | | ^ B0041 ^ Support streamlining cross-border payments | | ||
| Line 61: | Line 69: | ||
| </table> | </table> | ||
| - | The level of risk to the CBDC mostly depends on the several factors in how the design of the CBDC and the international laws and regulations that will ultimately cover the CBDC. The **Cloud Working Group Data Residency White Paper** identified four major risk areas which have relavance to the CBDC: | + | The level of risk to the CBDC mostly depends on several factors in how the design of the CBDC and the international laws and regulations that will ultimately cover the CBDC. The **Cloud Working Group Data Residency White Paper** identified four major risk areas which have relevance to the CBDC: |
| - Nature of the being gathered and stored by the CBDC | - Nature of the being gathered and stored by the CBDC | ||
| - | - Severity of the laws and regulations governing data in jurisdiction where the data resides, passes through or is being manipulated | + | - Severity of the laws and regulations governing data in the jurisdiction where the data resides, passes through, or is being manipulated |
| - Nature of the services the CBDC will offer internationally | - Nature of the services the CBDC will offer internationally | ||
| - Level of awareness (or ignorance) of the issues by international communities | - Level of awareness (or ignorance) of the issues by international communities | ||
| - | The **Cloud Working Group Data Residency White Paper** (see Table {{ref>dataResidencyUseCase}}) uses a series of Use-Cases to help explain how to classify data usage and when there might be **Data Residency** issues. The table lists for each Use-Case and where it is being generated, stored, processed, routed, and finally accessed by End User. In otherwords, the [[https://www.omgwiki.org/dido/doku.php?id=dido:public:ra:1.2_views:3_taxonomic:4_data_tax:02_state_taxonomy:start | State of the Data]]: | + | The **Cloud Working Group Data Residency White Paper** (see Table {{ref>dataResidencyUseCase}}) uses a series of Use-Cases to help explain how to classify data usage and when there might be **Data Residency** issues. The table lists each Use-Case and where it is being generated, stored, processed, routed, and finally accessed by the End User. In other words, the [[https://www.omgwiki.org/dido/doku.php?id=dido:public:ra:1.2_views:3_taxonomic:4_data_tax:02_state_taxonomy:start | State of the Data]]: |
| * [[https://www.omgwiki.org/dido/doku.php?id=dido:public:ra:1.2_views:3_taxonomic:4_data_tax:02_state_taxonomy:data_at_rest | Data-At-Rest]] | * [[https://www.omgwiki.org/dido/doku.php?id=dido:public:ra:1.2_views:3_taxonomic:4_data_tax:02_state_taxonomy:data_at_rest | Data-At-Rest]] | ||
| Line 75: | Line 83: | ||
| <figure dataResidencyUseCase> | <figure dataResidencyUseCase> | ||
| - | {{:cbdc:private:cbdc_omg:04_doc:15_common:50_international:screen_shot_2022-04-08_at_12.30.15_pm.png?700|}} | + | {{cbdc:04_doc:15_common:50_international:screen_shot_2022-04-08_at_12.30.15_pm.png?700|}} |
| - | {{:cbdc:private:cbdc_omg:04_doc:15_common:50_international:screen_shot_2022-04-08_at_12.33.24_pm.png?300|}} | + | {{cbdc:04_doc:15_common:50_international:screen_shot_2022-04-08_at_12.33.24_pm.png?300|}} |
| <caption>Data Residency Use Case Matrix from the **Cloud Working Group Data Residency White Paper**.</caption> | <caption>Data Residency Use Case Matrix from the **Cloud Working Group Data Residency White Paper**.</caption> | ||
| </figure> | </figure> | ||
| Line 89: | Line 97: | ||
| </WRAP>| | </WRAP>| | ||
| ^ **In-house** | <WRAP> | ^ **In-house** | <WRAP> | ||
| - | Data is present within the physical premises of the data custodian. Whether this is a single (computer) room, building or campus is not germane. What is germane is whether the storage, servers and network infrastructure are all privately controlled by the data custodian. As a specific case, if two locations are physically separate and connected by an Internet connection, this criterion would be violated. Examples of data sources that are in-country but not in-house are a wellsite sensor on a private owner’s oil lease and an automatic teller machine (ATM) in an International airport, on a ferry or on a cruise ship. | + | Data is present within the physical premises of the data custodian. Whether this is a single (computer) room, building or campus is not germane. What is germane is whether the storage, servers and network infrastructure are all privately controlled by the data custodian. As a specific case, if two locations are physically separate and connected by an Internet connection, this criterion would be violated. Examples of data sources that are in-country but not in-house are a well-site sensor on a private owner’s oil lease and an automatic teller machine (ATM) is in an International airport, on a ferry, or on a cruise ship. |
| </WRAP>| | </WRAP>| | ||
| ^ **External** | <WRAP> | ^ **External** | <WRAP> | ||
| - | One or more infrastructure components (storage, servers, network) are outside the jurisdiction in question. An example is a seismic vessel acquiring data within the territorial waters of a country. The acquisition process is being monitored by personnel physically within that country. The data is transmitted via satellite to a ground station located in another country (e.g., Russian Arctic via a Norwegian ground station, offshore Indonesia via a Singapore ground station, etc.) and then via the Internet into the company’s home country | + | One or more infrastructure components (storage, servers, network) are outside the jurisdiction in question. An example is a seismic vessel acquiring data within the territorial waters of a country. The acquisition process is being monitored by personnel physically within that country. The data is transmitted via satellite to a ground station located in another country (e.g., Russian Arctic via a Norwegian ground station, offshore Indonesia via a Singapore ground station, etc.) and then via the Internet to the company’s home country |
| </WRAP>| | </WRAP>| | ||
| </table> | </table> | ||
cbdc/public/cbdc_omg/04_doc/15_common/50_international/10_residency.1649549106.txt.gz · Last modified: 2022/04/09 20:05 by nick
