When developing or procuring services, agencies should make sure app data and messaging services can take advantage of c
Veritec’s Guide to the DTA Secure Cloud Strategy.
“Agencies need a bit of support moving to the cloud. It can be overwhelming.”– DTA
Digital transformation is an imperative for government. The latest DTA Secure Cloud Strategy provides guidance for agencies to reach their cloud goals.
Process
The latest strategy is based upon principles for cloud adoption. The DTA consulted with government agencies and cloud providers to achieve agency future state. It’s based on the philosophy that “principles guide agencies towards an outcome.”
Principles
Make Risk-Based Decisions Base decisions on the evaluated risk, not compliance. • Consider separating high and low value information into different environments • Apply security policy to make risk-based decisions • Apply appropriate controls for workload, and don’t restrict services that aren’t required.
01
Design Services For Cloud Cloud techniques increase speed and reduce manual tasks.
02
• Agencies must use cloud for new services or modernisation of services when fit for purpose, provide value, demonstrate risk management • Must design all new or modernised ICT services as cloud native or cloud enabled • Where no commercial cloud service is appropriate, design apps to be cloud-ready, maximising automation, portability and resilience.
03
Use Public Cloud As Much As Possible Public cloud offers fast and competitive services, without the maintenance, for agencies. • •
When choosing cloud, agencies should consider and preference public cloud Agencies should ensure the proper security implementation for information handled.
Use As Much of the Cloud As Possible Greater implementation of the cloud will allow agencies to keep pace with industry disruptions and technology. • Agencies must source as much of the service through cloud as practical and feasible • Where cloud cannot be sourced, agencies must make their developments cloud-enabled.
04
Avoid Customisation Using services as they come speeds up change cycles and increases agility. • Configure, not customise • Agencies should change business functions/processes over changing service functions.
05
Take Advantage of Automation Automation saves time by removing manual tasks from the team, allowing them to focus on more complex tasks. • Use automation to manage demand and availability from users • When developing or procuring services, agencies should make sure app data and messaging services can take advantage of cloud automation characteristics.
06
07
Monitor Health and Usage The visibility of cloud services means agencies can track and control cloud usage, cloud health, and cost. • • •
Ensure that cloud use can provide metrics to support forecasting and analytics needs of agency Ensure agencies can control costs of cloud through provisioning and scaling on demand Proactively monitor health and status of cloud services.
Implementation
Progression From Low to High Complexity
• Agencies should start with low complexity services and mature their approach • Medium complexity services may need planning, but shouldn’t be too challenging to find out how to implement them and are usually offered by the market. • High complexity services are often legacy and bespoke services, and can hold sensitive data.
Agencies Must Develop Their Own Cloud Strategy Value Case
Workforce Plan
‘Best Fit’ Cloud Models
Transition Approach
• Agencies will plan their own journeys to the cloud. A one-size-fits-all approach can’t cover agency need • Agencies need to understand the elements (left), then design their cloud strategy • The DTA community will provide toolkits and advice to help develop this.
Download the full DTA Secure Cloud Strategy from their website here. To accelerate your journey to the cloud, talk to Veritec about our Kick Start Program.
“The Digital Transformation Agency has the mandate to drive forward Digital Transformation.” – DTA
thank you.
Website: veritec.com.au Phone: (02) 6154 5900 Email:
[email protected] 
