Dear Department of Internal Affairs,
I wish to better understand NZ Government use of cloud services and the uptake of such services through GCDO negotiated agreements.

Please provide any "cloud plans" that were shared with the GCDO in the past 3 years. Agencies are required to have such plans for cloud adoption per digital.govt.nz

Please provide any security , risk or privacy assessments of any NZ or international cloud service providers that DIA or relevant government organisatins have undertaken (directly or indirectly through vendors) in the past 3 years including any reports into the integrity or suitability of these providers, detailing any concerns wrt. security, risk or privacy of NZ government use of these services. This should include all correspondence with these cloud service providers relating to assessments of audits of their services and mitigation of any related risks or issues relating to the providers service.
Can GCDO provide any insight into the success or failure of cloud adoption projects by government organisations in the past three years including any advise shared directly with individual organisations on adherence to the government 'cloud first' policy.Please provide a list showing services
and the government organisation that adopted them

Yours faithfully,

Dave

Dear minadviceteam,
My reply doesn't seem to be posted. Yes a summary for that question is fine

Yours sincerely,

D Watson

Dear minadviceteam,
Hi
You may not have seen my reply, a summary suggested by you is useful please.
In the interest of making my request easier answer by limiting what you need to collate, can you provide just the last three cloud plans and associated information please.

I am very aware of digital.govt.nz but it lacks actual material and is mainly guidance without any substantive examples or use cases showing how any agency has responded to the 'cloud first' policy and specifically what was provided to DIA GCDO in support of such cloud projects/upgrades/programmes.

Thanks in advance
Yours sincerely,

D Watson

Dear Jeremy,
A little disappointing but I can understand that these things take time, I look forward to your response

Yours sincerely,

D Watson

Dear minadviceteam,

Wow. That is a lot of redaction. I am not sure I am any wiser about specific cloud product adoptions in NZ gov.
It is very hard to understand the suppliers and products that were reviewed.

A lot of work has obviously gone into risk assessment - well done -who had access to this detail ,how do they obtain it and do agencies submit their own risk assessment to you as part of adoption?
Do you offer any 'cloud plan' documents or guidance to gov agencies that can be used to inform their 'cloud plan' which I understand they are required to do? I guess what I am really asking is do agencies take on all the work themselves and reference your risk assessments or do you give specific guidance on what should be in their plans?

Thanks for all your work collating these. I look forward to your response to the above questions.

Yours sincerely,

D Watson