Story image

AU Government announces new cloud strategy

05 Feb 2018

The Australian Government has released its new cloud strategy replacing a policy developed in 2014.

The Secure Cloud Strategy, which focuses on helping government agencies use cloud more easily, is the result of collaborative work in 2017 by government and industry.

The Government will use the new strategy to prepare agencies for the shift away from on-premise infrastructure and to cloud.

The Government’s initiative will support agencies through their transition to cloud, while guiding them past a “number of factors can get in the way of agencies realising their cloud aspirations,” like stubborn operating models and lack of knowledge and experience.

The key initiatives of the strategy are:

No one-size fit all

Agencies develop their own cloud strategies to suit their own needs.

Agencies will use strategy as a starting point to produce their own value case, workforce plan, and best-fit cloud model and service readiness assessment.

Cloud implementation will be guided by 7 cloud principles:

  1. Make risk-based decisions when applying cloud security
  2. Design services for the cloud
  3. Use public cloud services as the default
  4. Use as much of the cloud as possible
  5. Avoid customisation and use cloud services as they come
  6. Take full advantage of cloud automation practices,
  7. Monitor the health and usage of cloud services in real time.

Move towards an appropriate, layered certification model

The Government’s strategy will see a layered Cloud Certification Model created which will see greater opportunity for agency-led certifications, rather than just ASD certifications.

This will create a layered certification approach where agencies can certify using the practices already in place for certification of ICT systems.

Service procurement will be aligned with ICT Procurement Review

As cloud services move more rapidly than services available through panels traditionally do, the recommendations in the ICT Procurement Review align well with creating a better pathway for cloud procurement.

Clarify cloud system requirements with a common assessment framework.

An assessment framework and cloud qualities baseline will be introduced to clarify requirements.

A Cloud Responsibility Model

The strategy will develop contracts that clarify responsibilities and accountabilities of cloud providers to address unique cloud risks, follow best practices and maintain provider accountability.

Cloud knowledge collaboration platform

As a part of the strategy, the Government will develop a platform to share knowledge and expertise of cloud products and services.

The platform will enable secure sharing of cloud service assessments, technical blueprints and other agency cloud expertise, to iterate on work already done rather than duplicating it.

Cloud skills uplift programs

The Government will focus on building cloud skills and expertise within the Australian Public Service (APS) through existing and new programs.

Common shared platforms

The Government will explore and develop shared platforms that can be used by multiple services and reduce duplication, including:

  • Federated identity for government to enable better collaboration in the cloud.
  • A platform for PROTECTED information management to reduce enclaves in agencies, and continue to iterate cloud.gov.au as an exemplar platform.
  • Service Management Integrations services to enable agencies to manage multi provider services.

View the entire strategy here

Gartner: Local server revenue up by a quarter, shipments down
In Australia, server revenue increased 24.7% in 4Q18, while shipments declined 5.3%.
Unity and NVIDIA announce real-time ray tracing across industries
For situations that demand maximum photorealism and the highest visual fidelity, ray tracing provides reflections and accurate dynamic computations for global lighting.
NVIDIA announces Jetson Nano: A US$99 tiny, yet mighty AI computer 
“Jetson Nano makes AI more accessible to everyone, and is supported by the same underlying architecture and software that powers the world's supercomputers.”
Slack doubles down on enterprise key management
EKM adds an extra layer of protection so customers can share conversations, files, and data while still meeting their own risk mitigation requirements.
How Dotscience aims to deliver end-to-end governance
NGC is supposedly the hub of GPU-optimised software for deep learning.
HPE launches 'right mix' hybrid cloud assessment tool
HPE has launched an ‘industry-first assessment software’ to help businesses work out the right mix of hybrid cloud for their needs.
Security professionals want to return fire – Venafi
Seventy-two percent of professionals surveyed believe nation-states have the right to ‘hack back’ cybercriminals.
Alcatraz AI to replace corporate badges with AI security
The Palo Alto-based startup supposedly leverages facial recognition, 3D sensing, and machine learning to enable secure access control.