More precise instructions needed for deciding on the use of cloud services – CSC gave a statement on the updated cloud service guidelines for the public sector
As the government is updating its guidelines for the use of cloud services by the public sector, CSC calls for more precise instructions for making decisions over the use of cloud services, and especially for the related risk assessment. Guidelines are needed so that the responsibility does not fall on single data management unit or agency but instead the guidelines are applied in uniform manner. It is particularly important to identify the public services and data that should be accessible also if international telecommunications connections between Finland and rest of Europe was interrupted.
In addition, legal barriers for data transfers must be identified and removed to allow for maximal utilisation of cloud services. Cloud services must be considered as a part of a wider body of digital infrastructures and of the development of society’s processes and structures.
In preparing the more detailed instructions to be attached to the guidelines, it is important to consult stakeholders in order to concretise the ways of working related to the guidelines.
Read CSC’s comments in more detail (pdf) (in Finnish).