www oasisopen org StandardsBased e Government Procurement Systems

www. oasis-open. org Standards-Based e. Government Procurement Systems Opportunities and Priorities Eduardo Talero Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 1

www. oasis-open. org Agenda • Electronic Government Procurement (e. GP) • Why standards? • Standards and e. GP • Standards/FOSS and agile system development • MDBs can help • Closing thoughts Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 2

www. oasis-open. org What is e. GP? Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 3

www. oasis-open. org Logframe of e. GP Leadership/ Human Resources e. GP System TRANSPARENCY Disclosure Facilities Governance EFFICIENCY User Support Facilities Institutional Change Transaction Facilities ECONOMY Technology Integration Facilities Financing Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 SYNERGY 4

www. oasis-open. org Why Standards for e. GP? Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 5

www. oasis-open. org How Standards can help e. GP • • Enhance B 2 G/G 2 G connectivity and interoperability Generate trust in electronic experience Enhance competition and inclusion Enhance efficiency and flexibility of public procurement function Enhance cooperation and transparency Facilitate evolution and innovation Increase return, reliability of investments Avoid vendor lock-in Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 6

www. oasis-open. org Privacy fears are not completely unreasonable… Personal information records compromised by security breaches in the U. S. since January 2005 exceeds 255 million Revealed: 8 million victims in the world's biggest cyber heist (www. privacyrights. org/ar/Chron. Data. Breaches. htm, accessed March 9, 2009. Cloud computing lets Feds read your email Hacker clones a valid CA certificate from and MD 5 -based SSL certificate using a Playstation 3. ( Technology Review, March/April 2009, pg. 86) Internet wiretapping Bugging the cloud Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 UK's Revenue and Customs loses 25 million customer records 7

www. oasis-open. org Standards Categories most relevant to e. GP Type of Standard Examples Interoperability HTTP, WS-I Profiles, RNIF, IFX Registration UDDI, DUNS, eb. XML Registry Identification UN-SPSC, GTIN, LDAP, X 500, ISO 7501 Web Services WS*, WSDL, JSR-168 Security HTTPS, ISO 17999, ISO 28000, WSS, X 509 (PXIX) OSSTMM Reliability HTTP-R, WS-R Communication, Messaging IPS (TCP/IP), SOAP, eb. MS, ISO 15489, SWIFT, ODF, PDF, ISO 20022 Interpretation Collaboration ISO/IEC 7816, DSDL, UBL eb. XML CC, RELAX-NG BPM, Workflow BPMN, BPEL, WS-C Legal UNCITRAL Model laws, EU Directives IT Service Management ISO/IEC 20000 eb. XML, WSCI, RN/PIPS Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 8

www. oasis-open. org DIFFERENT STANDARDS FOR DIFFERENT PHASES OF e. GP SYSTEM DEVELOPMENT Interoperability/Collaboration SUPPLY CHAIN MANAGEMENT FACILIT Workflow Web Services TRANSACTION FACILITIES Reliability e. Purchasing Security e. Payments Registration e. Reverse Bidding e. Tendering Identification Communication DISCLOSURE FACILITIES Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 9

www. oasis-open. org Use of Open Standards/Open Source by 14 leading e. GP governments* • 7 use proprietary development platforms. Other 7 (6 in Asia) use J 2 EE • Only 4 use Linux, 2 of them in EU • Only 4 use Apache, the rest use proprietary web servers • 7 use My. SQL, most others Oracle. • No one says to allow ODF documents. • Only 6 use UNSPSC. • Only 4 use XML, and only one uses eb. XML for interoperable electronic business • Only 4 use SOAP, 3 use UDDI, only 1 uses WSDL and none use BPEL, WS-Security, WSCI (so much for SOAs). • Most use digital certificates and asymmetrical encription for authentication. *Argentina, Australia (State of New South Wales), Brazil, Chile, Finland, Hong Kong, India (Indian Railways), Italy, Mexico, Norway, Romania, Singapore, South Korea, The Philippines Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 10

www. oasis-open. org Standards / FOSS and agile system development Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 11

www. oasis-open. org Short Timeline For E-governance System Development & deployment Develop Detailed Project Proposal 10 months Specify System and Hire Developers 10 months Develop system and deploy pilot 14 14 months Rollout System 7 months Operate system with resident support 66 months Y 1 Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 Y 2 Y 3 Y 4 12

www. oasis-open. org The Typical Resulting System Today… Limited Configurability Limited Interoperability with other vendor systems CORE OF SYSTEM IS A BLACK BOX Vendor lock-in Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 Effective monopoly pricing for new licenses 13

www. oasis-open. org An agile system development strategy based on open standards and open source* INTERFACE INTERFACE DATA LOGIC * Proposed in essence by ICT Agency of Sri Lanka (http: //www. icta. lk) I 1 Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 I 2 I 3 I 4 14

www. oasis-open. org IMAGINE: industrial-strength e. Governance systems that are also easy to change, interoperable, social, knowledge-oriented, community-driven… INTERFACE • Joined-up government INTERFACE • Transaction wizards • Discussion groups • Community advice • Personalized interface • Workflow wizards • Single sign-on • Online support • Customer ratings • Sponsored content • User profiles • Model documents • Transaction history DATA • Specification templates • Customer content (wikis) • Customer usage history DATA LOGIC • Workflow management • Business collaboration • S/P/R • Supply-chain automation • Secure all-electronic transactions • Business process automation • Grievance management • Social networking/learning • Business intelligence Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 15

www. oasis-open. org MDBs can Help by: • Developing lending instruments and procurement procedures/documents for agile system development • Leveling procurement playing field for Open source products. For example, of proprietary office suites with functionally equivalent open systems alternatives. • Referencing good practice standards in guidelines, templates, model TOR, model specifications. Fex. , eb. XML, UMM, WSS, IMAP • Recommending well established standards that are widely recognized and tested. Fex: SOA, Uncitral model laws, ODF, UNSPSC, BPEL 4 WS • Requiring standards only very selectively, when economy/efficiency of investments, products or services would otherwise be compromised. Fex: XML, ISO 9000, ISO 14000 “or equivalent QA standards“. Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 16

www. oasis-open. org In Closing… • • Standards enhance economy, efficiency, competition, transparency and evolution of e. GP Free and Open source SW (FOSS) facilitates and accelerates use of open standards Open standards/FOSS facilitate fast, iterative development of e. Governance applications which now take too long and are very risk-prone. Governments cannot afford to build the organic, social applications of the future only with proprietary standards/technology. Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 17

www. oasis-open. org In (really) Closing… • • MDBs can be far more proactive in referencing, recommending and sometimes even requiring Standards. MDB’s need to create level playing field for procurement of FOSS and for contracting of agile application development. Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 18

www. oasis-open. org Thank you Questions? etalero@worldbank. org or eduardo@talero. name Eduardo@talero. name Oasis-World Bank e. Gov Workshop 4 -17 -09 19