The Digital Transformation Agency (DTA) has followed up its secure cloud strategy for storing Government information by answering four of the most asked questions raised by interested PS staff members on its online blog.
In the blog, DTA answers the question of whether the way cloud services are certified for the PS had been changed with a clear ‘No’.
“Anyone who provides technology services to Government is subject to stringent assessment and certification and we’ve worked with the Australian Signals Directorate to make sure that doesn’t change,” the Agency said.
“What the secure cloud strategy does do is confirm existing practices including the need to keep the Government’s lead Agency for information security informed so they can help when we need them.”
It said this gave Agencies the option of arranging their own assessments using the same accredited professionals and requirements followed by the Australian Signals Directorate.
With respect to the view that the cloud was being treated differently from other service providers, DTA also responded with ‘No.’
“Government already outsources lots of its technology to service providers to manage,” it said.
“Cloud is no different.
“We are still asking someone to manage technology services on our behalf.”
In answer to the question “‘Is using offshore services really okay?”, DTA said the strategy had not changed how it determined whether information could be stored or managed outside Australia.
“This will always be a decision made by individual Government organisations based on a clear understanding of the risks,” it said.
“We have confirmed storing information or supporting cloud in locations outside Australia is an option.
“Before making these decisions, the most important thing is knowing the information we want the cloud to manage and having a clear understanding of how it’s done.”
In reply to the question “Shouldn’t there be one solution for everyone?”, DTA said every Agency was different.
“Our views of cloud depend on our individual technology environments and how ready each of our organisations is to embrace different services,” it said.
“Instead of coming up with a one-size-fits-all cloud solution, we’ve asked Agencies to publish their own strategies.
“This will give us all a chance to share what we’re able to do and ensure we get solutions that fit individual circumstances.”
DTA’s blog can be accessed at this PS News link.
