Advice on managing the recordkeeping risks associated with cloud computing

Cloud computing is an increasingly common business practice, which provides new opportunities and challenges for storing digital records. Often cloud computing is an internet service where data is stored by a service provider which may be outside of Australia and New Zealand territory borders.

In addition to offering substantial cost savings, it can reduce the pressure on ICT departments to provide ever increasing storage capacity. However there can also be risks associated with the use of cloud computing services where they are used to manage official government information.

This new guideline provides a list of practical measures to advise how government organisations can best utilise this emerging technology. It provides a checklist for organisations to determine which records could be kept using cloud computing applications. It details the potential risks that need to be considered, and offers a list of useful contractual arrangements, as well as questions to ask of internet service providers.

By clarifying the what how and why, these guidelines allow government organisations to maintain the integrity of their recordkeeping and fully benefit from the advantages of cloud computing.