Australian Government Architecture
Search

Cloud computing

Definition

The Australian Government has adopted the US Government's National Institute of Standards and Technology's (NIST) definition of cloud.

Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.

Purpose

A mature capability in cloud computing enables Commonwealth entities to efficiently deliver information technology services online in a secure and scalable manner.

Cloud computing is realised through:

  • the storage and handling of sensitive information, in the cloud, in a manner that maintains public trust
  • scalable and cost-effective solutions that can be increased or decreased in line with demand.

Objectives

The objectives of this content are to:

  • maximise uptake of cloud computing in government while embedding risk-based decision-making for cloud security
  • identify, consolidate, and standardise cloud computing services to generate faster delivery, continuous improvement cycles, and broad access to services
  • identify, or establish and implement, consistent Standards or Designs for cloud computing
  • maximise reuse of cloud computing services across government
  • highlight whole-of-government purchasing arrangements for cloud computing services
  • consider the capability as complementary to other related capabilities, including Cloud Financial Operations, Hosting, Information Asset Management, and Information Asset Security.

Whole-of-government applicability

The Secure cloud strategy has been developed to guide entities through their adoption of cloud. It lays the foundations for sustainable change, seizing opportunities to reduce duplication, enhance collaboration, improve responsiveness and increase innovation across the Australian Public Service (APS).

The Data and digital government strategy sets a vision for 2030 to deliver simple, secure and connected public services for all people and business, through world class data and digital capabilities.

The capability of Cloud Computing will be key to the Strategy's mission of 'Simple and seamless services'. Under this mission, the outcome to 'deploy scalable and secure architecture' guides the APS to:

  • develop interoperable platforms and use standards to unlock opportunities for data sharing, integration, collaboration and reuse cross the APS
  • develop flexible and resilient systems and services, supported through suitable adoption of cloud infrastructure.

The Whole-of-government cloud computing policy will come into effect on 1 July 2026.
Agencies should begin preparing for its implementation. 
Read the new policy on digital.gov.au.

Domains

This capability is part of the following domain.
DOM2

Technology reference

Policies

The following policies have requirements that impact this capability.
Mandate: Endorsed
Status: Core
The Whole-of-government cloud computing policy will come into effect on 1 July 2026.Agencies should begin preparing for its implementation. Read the new policy on digital.gov.au. This policy describes the requirements for entities planning digital investments involving cloud computing.

Standards

The following standards support development of digital solutions in this capability.
The Whole-of-government cloud computing policy will come into effect on 1 July 2026.Agencies should begin preparing for its implementation. Read the new policy on digital.gov.au.

Designs

The following designs include examples of how digital solutions in this capability can be delivered.

Lead Agency: Digital Transformation Agency

The Cloud marketplace is a digital sourcing arrangement for cloud computing offerings to government. It is managed by the Digital Transformation Agency.

Lead Agency: Digital Transformation Agency

The Digital Transformation Agency (DTA) provides digital sourcing contract templates that make it easier for government agencies to set up contracts with suppliers.

Lead Agency: Australian Signals Directorate

Technology Type: Microsoft 365

The Blueprint for secure cloud (previously known as the Protected utility blueprint) is an online tool to support the design, configuration and deployment of collaborative and secure cloud and hybrid workspaces, with a current focus on Microsoft 365.

Lead Agency: Australian Cyber Security Centre

The Cloud Assessment and Authorisation publication is intended for cloud service providers, Infosec Registered Assessors Program (IRAP) assessors and Non-Corporate Commonwealth Entities who are subject to the Public Governance, Performance and Accountability Act 2013 to the extent…

Strategic Alignment

Digital solutions in this capability can support the following strategies.

Whole of Government Hosting Strategy: Hosting Certification Framework

Secure Cloud Strategy

Was this information helpful?

Do not include any personal information. We are unable to respond to comments or feedback. If you would like a response, please email, or phone us. Our details are on the AGA contact page www.architecture.digital.gov.au/contact-us.