Key Points

The delivery of government services to meet citizens’ needs continues to drive a large range of agency ICT use cases, which must balance legacy platforms with more responsive services. To better address these needs, the NSW Government is making the strategic shift to cloud consumption through the use of public and private cloud services.

Agencies are subject to the following mandates in their selection and use of ICT services.

1. All NSW Government agencies must make use of public cloud services as the default. Where public cloud services are not suitable for agency requirements, private and community cloud services, provided through GovDC Cloud can be used. Where these services are not suitable, other private cloud services can be used by exception only. Listed below are the requirements to be followed:

   • The use of public cloud services will apply to new agency ICT services and the material replacement or renewal of any existing services, platforms, and infrastructure.

   • Exemptions to the use of public cloud and/or GovDC Cloud services will be reviewed in cases where these services are not suitable, as assessed through one or more of the following pre-requisites: cost-benefit analysis, market scan of public cloud services, or security assessment.

   • In cases where ICT services cannot be consumed through public cloud and/or GovDC Cloud, agencies will be required to develop a briefing paper to request exemption, supported by these pre-requisite assessments.

   • Exemption requests that are associated with a funding submission to the Digital Restart Fund will be reviewed and approved by the Delivery and Performance Committee of Cabinet (DaPCo), and are to be submitted in conjunction with the Delivery and Performance Architecture (DAPA) checklist.

   • Exemption requests that are not associated with a funding submission to the Digital Restart Fund will also be reviewed and approved by DaPCo and are to be submitted in conjunction with the bi-monthly ICT assurance, cyber and procurement DaPCo submission.

   2. All NSW Government agencies (except state owned corporations) must continue to relocate remaining data centre and computer room infrastructure from on premise agency and leased facilities to either public cloud or GovDC Cloud services.

   3. Agencies must operate all private cloud services through GovDC. Listed below are the requirements to be followed:

   • Agencies may use commercial provider hosting services where these are delivered through GovDC services.

   • Agencies must obtain approval from the Secretary of Department of Customer Service (DCS) before making other data centre arrangements such as entering into a new contract (or extending an existing contract, or taking any extension option) to acquire data centre capacity, or designing or commissioning any capital works for a new or existing data centre solutions.

   • Exemptions will only be considered in circumstances that are business critical or where on-premise assets cannot be supported by public or private cloud services.

   • The Secretary of DCS may issue directions to agencies to consolidate and manage data centre arrangements.

   • In addition, to facilitate a coordinated and timely approach, agencies may be requested to provide DCS with the following information:

     • copies of any existing contracts and leases with other data centres, facilities or similar;

     • advice on required services that may be suitable for establishment in the GovDC Marketplace;

     • physical and virtual infrastructure asset lists, migration strategies and implementation timelines; and

     • other relevant information to assist the coordination of migrating agencies to public or private cloud services.

   4. Agencies must develop their own cloud strategies and transition plans and submit these to the NSW Government ICT and Digital Leadership Group by June 30th, 2021.

   5. Agencies must procure cloud services in compliance with the NSW Government Procurement Policy Framework. Listed below are the requirements to be followed:

   • NSW Government agencies will evaluate cloud-based services when undertaking all ICT procurements. The decision on the appropriate ICT delivery model will be based on an assessment of the business case, including the cost benefit analysis, and achieving value for money over the life of the investment;

   • Agencies must make use of mandated Whole of Government Agreements and NSW Government procurement agreements with suppliers (where they exist);

   • Where no NSW Government agreements exist, agencies must use the relevant ICT Procurement contract framework to source ICT services;

   • Agencies should source cloud services through buy.NSW; and

   • Agencies must not purchase cloud services through purchasing cards. These services should be consumed through a procurement agreement, enterprise agreement or Whole of Government agreement and invoiced accordingly.

   6. Agencies must secure all cloud services in compliance with the NSW Cyber Security Policy.