IT Systems and Data Protection

25.06.19

The National Audit Office's guide to cloud services

The National Audit Office’s digital transformation expert, Yvonne Gallagher, focuses on assessing the implementation of digital and related change programmes.

Cloud services can bring cost and performance benefits. But they can also generate new challenges and risks.

The National Audit Office’s (NAO) new guide ‘Guidance for audit committees on cloud services’ helps leaders of organisations to oversee the decision-making and implementation of cloud services.

Landing image Cloud Computing

What is the cloud?

The ‘cloud’ is a term for using the internet to access systems and data stored outside an organisation’s own premises. Cloud services are not new. But better and faster internet connections today create new opportunities for cloud services, which are available in an increasing range of areas, including business and financial systems.

Why should you care?

Organisations are increasingly adopting cloud services with the aims of reducing costs, increasing efficiency and transforming their operations. However, there is a growing acknowledgement in government that achieving these benefits is not always straightforward.

To help boards, audit committees and other leaders, the NAO’s new guidance sets out questions that can be asked at three stages: assessment, implementation and management of cloud services.

READ MORE: Time to address the digital skills gap

How should you assess the need for cloud?

Moving to cloud can have significant long-term implications for the future operation and running costs of an organisation. So, before committing, leaders must first understand what is involved. Management should set clear criteria for success so that it can properly evaluate the options in three key ways.

Firstly, (in setting a strategy) avoid being led by specific technological solutions. ‘Cloud first’ may not be right for everyone. Secondly, costs can vary significantly depending on uncertain factors such as future service usage and organisational capability. Business cases need to be clear on the benefits; whether they are reducing costs, improving services or enabling transformation.

Finally, it is important to check proposed providers meet all relevant security requirements, standards, regulations and business-specific needs. Organisations cannot afford to be passive consumers.

11800-001 - Figure 1

What are the risks in implementation?

Implementing cloud services is a big change which involves significant challenges and risks. Organisations used to storing data on site may not have the capability or experience to deal with the challenges of introducing and configuring new services.

Organisations need to address three key risks during implementation. The first is to devote time and attention to setting up services, and ensuring this continues through implementation to deal with unexpected issues. Organisations need a robust plan in place to maintain business as usual while managing change. They need to understand the impact of data quality and whether it should be transferred in its existing state to new systems.

Secondly, risks should be assessed with clear responsibilities assigned to staff and mitigating actions put in place. For example, there should be plans to deal with a range of scenarios for service outage and data loss. Thirdly, organisations must consider how these changes will affect all key stakeholders and users, in addition to managing how the new services are implemented.

DOWNLOAD THE NAO 'GUIDANCE FOR AUDIT COMMITTEES ON CLOUD SERVICES' GUIDE HERE

What does cloud imply for managing services?

Moving to cloud should reduce the resource needed to manage in-house services. But this will be counterbalanced to some extent by the need for specialist expertise to understand, manage and interpret the relationship between the cloud service and the organisation.

A key consideration is the impact on IT operations. Cloud services are updated frequently, and the organisation will often have less control over the acceptance of updates. A second consideration for management is how much assurance it receives from cloud providers.

Cloud providers typically commission Service Organisation Control (SOC) reports from independent auditors to provide assurance to their customers on controls and security arrangements. External auditors will wish to see these reports as part of the annual audit and follow up any deficiencies. All of these considerations mean that the decision to adopt cloud services is one that requires active review and consideration by organisations at all levels.

Source: PSE June/July 2019

Comments

There are no comments. Why not be the first?

Add your comment

 

related

public sector executive tv

more videos >

latest public sector news

Ep 9. Greater Manchester's bright future, Eamonn & Andrew - GMCA

20/02/2020Ep 9. Greater Manchester's bright future, Eamonn & Andrew - GMCA

Our first podcast episode with two guests took us on the road to the TfGM offices where we spoke to two representatives from the Greater Manchest... more >
Northern Housing Consortium calls for government action

20/02/2020Northern Housing Consortium calls for government action

The Northern Housing Consortium (NHC) has called for government action to ‘level-up’ housing in the North as new study highlights dis... more >
UK’s biggest eco-friendly refuse fleet worth £3.4m to launch in Liverpool

20/02/2020UK’s biggest eco-friendly refuse fleet worth £3.4m to launch in Liverpool

The UK’s biggest eco-friendly fleet of refuse vehicles is being launched in Liverpool tomorrow (Feb 21) by Mayor Joe Anderson. The fle... more >

editor's comment

25/10/2017Take a moment to celebrate

Devolution, restructuring and widespread service reform: from a journalist’s perspective, it’s never been a more exciting time to report on the public sector. That’s why I could not be more thrilled to be taking over the reins at PSE at this key juncture. There could not be a feature that more perfectly encapsulates this... read more >

last word

Prevention: Investing for the future

Prevention: Investing for the future

Rob Whiteman, CEO at the Chartered Institute of Public Finance (CIPFA), discusses the benefits of long-term preventative investment. Rising demand, reducing resource – this has been th... more > more last word articles >
Ep 9. Greater Manchester's bright future, Eamonn & Andrew - GMCA

20/02/2020Ep 9. Greater Manchester's bright future, Eamonn & Andrew - GMCA

Our first podcast episode with two guests took us on the road to the TfGM offices where we spoke to two representatives from the Greater Manchester Combined Authority. Chief Executive Eamonn Boyl... more >
Northern Housing Consortium calls for government action

20/02/2020Northern Housing Consortium calls for government action

The Northern Housing Consortium (NHC) has called for government action to ‘level-up’ housing in the North as new study highlights disproportionate cut-backs in northern councils. ... more >

the raven's daily blog

Utilising data to best deliver meaningful public services

14/11/2019Utilising data to best deliver meaningful public services

Public Sector Executive’s Matt Roberts explains how living in a modern, interconnected world, as we do, means public sector organisations cannot afford to ignore the role of data. Data is all around us in the modern age. Unseen, the digital environment plays a role in near on every aspect of our lives. It influences, manages and mit... more >
read more blog posts from 'the raven' >

comment

Peter Kyle MP: It’s time to say thank you this Public Service Day

21/06/2019Peter Kyle MP: It’s time to say thank you this Public Service Day

Taking time to say thank you is one of the hidden pillars of a society. Being on the receiving end of some “thanks” can make communit... more >
How community-led initiatives can help save the housing shortage

19/06/2019How community-led initiatives can help save the housing shortage

Tom Chance, director at the National Community Land Trust Network, argues that community-led initiatives are a productive way of helping to solve... more >
Aberdeen's green transport fleet attracting international attention

19/06/2019Aberdeen's green transport fleet attracting international attention

Aberdeen City Council’s hydrogen spokesperson, councillor Philip Bell, highlights the Granite City’s determination to play a leading ... more >
A fifth of public sector workers have never received a thank you from the people they serve

13/06/2019A fifth of public sector workers have never received a thank you from the people they serve

A fifth of the country’s public sector workers say they have NEVER received a ‘thank you’ for doing their job as Public Service... more >

interviews

Artificial intelligence: the devil is in the data

17/12/2018Artificial intelligence: the devil is in the data

It’s no secret that the public sector and its service providers need to invest in technology to help make better use of their resources. Bu... more >
Digital innovation in the public sector: The future is now

17/12/2018Digital innovation in the public sector: The future is now

One of the public sector’s key technology partners has recently welcomed a new member to its team. Matt Spencer, O2’s head of public ... more >
New Dorset Councils CEO on the creation of a new unitary: ‘This is going to be the right decision for Dorset’

05/11/2018New Dorset Councils CEO on the creation of a new unitary: ‘This is going to be the right decision for Dorset’

The new chief executive of one of the new unitary authorities in Dorset has outlined his approach to culture and work with employees, arguing tha... more >
Keeping the momentum of the Northern Powerhouse

15/10/2018Keeping the momentum of the Northern Powerhouse

On 6 September, the biggest decision-makers of the north joined forces to celebrate and debate how to drive innovation and improvement through th... more >

public sector focus

View all News