Cloud Computing strategy for Norway

In recent years cloud computing has become an important outsourcing alternative for the Norwegian public sector. We see that a growing number of both infrastructure and software services are being supplied in the cloud. Cloud services differ from traditional out-sourcing models in important areas which create challenges for enterprises considering using such services. The strategy addresses these issues.

The main objective of the Cloud Computing strategy for Norway is to provide public and private enterprises with more room for manoeuvre when deciding which ICT solutions to use. Provided that other important considerations are not compromised, enterprises should be able to use cloud services wherever they promise the best result and the most cost-effective solution.

The strategy should facilitate:

• more cost-effective ICT solutions
• increased focus on core activities
• greater flexibility
• greater security through more professional and standardised ICT
• lower threshold for innovation and startups
• reduced carbon footprint from ICT operations.

Cloud Computing strategy for Norway (pdf)

Utdrag:

Foreword
Norwegian public and private enterprises outsourced services for many years. This allows them to focus on their core activities and leave for example IT services to an external party. In recent years cloud computing has become an important outsourcing alternative. We see that a growing number of both infrastructure and software services are being supplied in the cloud. This also applies to services aimed at the public sector.

One could ask whether we need a separate strategy for cloud services; after all, we have been outsourcing services for many years now. However, cloud services differ from traditional out-sourcing models in important areas which create challenges for enterprises considering using such services and, in particular, for public sector enterprises: it is not always possible to know exactly where or when data is stored or processed, and the agreements regulating these services are often standard contracts issued by the service providers. Many enterprises have concerns about the security of cloud services and whether current regulations permit their use.

The public sector must become more cost-effective in the coming years, and the use of ICT and the digitisation of services constitute a vital element in this process. But the operation of digital services and public ICT systems must also be cost-effective. In the Circular on digitisation for 2016, which applies to all public sector enterprises, we therefore require that they consider cloud services as an alternative when procuring ICT. In this strategy we propose measures to make it easier for both public and private enterprises to conduct this type of assessment.

It is also important that public sector enterprises operate their ICT systems reliably and securely. A key element of the development of this strategy has been to assess existing legislation to ensure that it makes clear what is permissible and what is not. In following up this strategy, we will establish resources that can provide guidelines for procurement of cloud computing on topics such as: information value assessment, information security, risk assessment and contract management for the public sector. Such resources will also have transfer value for business and industry.

During the development of this strategy the Ministry of Local Government and Modernisation has held workshops with public sector enterprises, municipalities and the ICT industry, as well as regular meetings with an advisory group with representatives from central government, local government and key stakeholders in data protection and security. During the same period, the Norwegian Association of Local and Regional Authorities has conducted a feasibility study of the use of cloud computing in the municipalities. The two projects have cooperated closely. I would like to thank everyone involved for providing important input.

Jan Tore Sanner
Minister of Local Government and Modernisation

[...]

Example: UNINETT – a cloud broker for the higher education sector

UNINETT is owned by the Norwegian Ministry of Education and Research, and provides
internet access and online services to the higher education sector in Norway. In 2016 the
ministry has commissioned UNINETT to establish a community cloud for Norwegian
universities and university colleges. UNINETT will therefore serve as a cloud service
broker for the entire higher education sector and provide secure cloud services, including
adapted commercial cloud services.

UNINETT has already established a community cloud (UH-sky) in collaboration with the
Universities of Trondheim, Oslo, Bergen and Tromsø. The work on developing the cloud
brokerage service will continue this collaboration.

UNINETT is also working on cloud-based infrastructure platforms to make typical datacentre
services accessible from the cloud. Moreover, some universities are cooperating
on establishing a common infrastructure platform in their data centres so that they can
provide infrastructure services to other actors within the sector in the future.

Source: UNINETT

Se også saken på regjeringen.no.