This policy will allow agencies to confidently address recordkeeping issues when moving into cloud technology.
|Recordkeeping Policy: Recordkeeping Implications of Cloud Computing|
Agencies should include records risks when conducting their risk assessment of adopting cloud solutions. Particular care needs to be taken when the information is of a sensitive or private nature. Records should only be stored in a cloud environment that complies with all Victorian legislation and policy. Agencies should ensure that agreements with vendors include clauses that protect agency data. The Guidelines provide assistance in complying with these requirements.
This Policy is supported by the following two Guidelines:
|Cloud Computing Guideline 1: Cloud Computing Decision Making|
|Cloud Computing Guideline 2: Cloud Computing Tools|
For ease of use, the 4 tools are also available as individual files to download in PDF format. The checklists and risk assessment templates are also available as editable Word documents.
- Risk Assessment Tools (PDF version, Word version)
- Contract Checklist (PDF version, Word version)
- Requirements Checklist (PDF version, Word version)
- Document Map (PDF version)
Both the Policy and the Guidelines were developed in accordance with the issues determined by and the feedback received on the Recordkeeping Implications for Cloud Computing Issues Paper.
We would like to acknowledge and thank the experts who provided comments on the Issues Paper.