Under the federal government’s hosting certification framework, Oracle has been approved to hold protected-level public sector data, joining Amazon Web Services, Microsoft, and others as a ‘qualified strategic’ cloud provider.
As the deadline for agencies to comply with the framework, which was created to manage supply chain risks, approaches, the tech giant discreetly joined the list of authorised key cloud providers this week.
Agencies will be expected to host protected and whole-of-government systems exclusively with certified strategic or ‘certified guaranteed’ data centres, cloud service providers, and Software-as-a-Service providers starting in July.
This will include “any citizen data… kept in certified data centres within Australia,” as well as “any cloud provided data… served by certified cloud providers in certified data centres within Australia,” according to Employment Minister Stuart Robert.
Certified strategic is the framework’s highest level of assurance, requiring providers to allow the government to specify ownership and control conditions, whereas certified assured provides protections in the event that ownership, controls, or operations change.
Uncertified service providers are also permissible for “non-sensitive data, or if their internal risk assessment deems it is appropriate,” but agencies should be aware that they provide only basic security.
Oracle joins AWS (Australian region), AUCloud, Sliced Tech, Vault Cloud, Microsoft (Australian region), and Kyndryl as the latest recognised strategic cloud providers to be accredited (Canberra and Sydney regions).
Oracle partnered with Canberra-based data centre provider Australian Data Centres more than a year ago to provide its portfolio of public cloud services to federal government departments.
Along with competitors Canberra Data Centres and Macquarie Telecom, Australian Data Centres was one of the first three data centre providers to obtain the coveted certified strategic designation in June 2021.
Other data centre providers, such as NEXTDC, Equinix, Fujitsu, DCI Data Centres, and, most recently, AirTrunk, have now been accredited under the framework, either at the facility or enclave level.
