6-Appendix K - Enterprise Standards for Business Applications and Internet of Things (IoT).pdf

Appendix K - Enterprise Standards for Business Applications and Internet of Things (IoT)

Business Applications:

The following standards and reference documents have been identified as necessary elements for Business Applications deployed at the City:

Open Group Guide Using The Open Group Architecture Framework (TOGAF) to Define and

Govern Service-Oriented Architectures, 1-931624-95-X, G113, The Open Group, May 2011 Technical Standard Service Orientated Architecture (SOA) Governance Framework, 1-

931624-82-8, C093, The Open Group, August 2009 Open Group Standard SOA Reference Architecture, 1-937218-01-0, C119, The Open Group, November 2011 Reference Architecture for Service Oriented Architecture Version 1.0 Public Review Draft 1, sao-ra-pr-01, OASIS, 23 April 2008 Cloud Computing Service Metrics Description, Special Publication 500-307, National

Institute of Standards and Technology (NIST), 2015.

Smart City & IoT Standards

While the IoT and Smart City industry does not have a fully mature body of standards, there are several organizations developing standards, and the City places a strong emphasis on interoperability across our IoT and Smart City acquisitions. The Proposer should respond to the standards in the other sections of this document for all IoT and Smart City solutions the City looks to acquire. In addition, the Proposer should provide a concise statement regarding which standards and specifications the proposed solution supports for the following items listed below.

Including why the value provided by that standard justifies investment by the City:

IoT Device and Data Integrity IoT Security Device Management Smart Cities & IoT Framework Data Protocols Semantic Identity Management & Federation

Currently, the City prefers the following as applicable:

Device Management - Open Mobile Alliance (OMA) Device Management 1.2.1 IoT Framework – Input, Processing, Storage, Output (IPSO) Application Framework, IEEE

P2413, and OMA Lightweight M2M (LwM2M) v1.0.

National Institute of Standards and Technology (NIST) NIST 800-145 - The NIST Definition of Cloud Computing; National Institute of Standards and Technology, Sept 2011

NIST 800-146 - Cloud Computing Synopsis and Recommendations; National Institute of Standards and Technology, May 2012

NIST Cloud Computing Reference Architecture (version 1); National Institute of Standards and Technology, March 2011

Special Publication 800-48 Rev. 1: Guide to Security Legacy IEEE® 802.11 Wireless Networks, National Institute of Standards and Technology, July 2008, Gaithersburg, MD.

NISTIR 8062 (DRAFT): Privacy Risk Management for Federal Information Systems, National Institute of Standards and Technology, May 2015, Gaithersburg, MD.