Cloud Computing
The Strategy and Planning team from ITS can help you make sense of the complex and fast-changing world of cloud computing.
If you are thinking about using cloud computing or have questions about its use, please contact Strategy and Planning to discuss the issues involved.
What is cloud computing?
Cloud computing is the delivery of computing as a service rather than a product. The standard definition of cloud computing from the US National Institute of Standards and Technology (NIST) is:
| "it is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction." |
In its simplest terms, you could think of cloud computing as any time that data or computing services are stored off-campus by a third party and accessed through the web, instead of being installed on your machine. Examples of these services include:
The CAUDIT website is a very useful resource for more information about cloud computing and how it relates to the tertiary education sector.
Proposed Cloud Computing Policy
Information Technology Services and the Registrar’s Office are currently consulting on a draft Cloud Computing policy (.doc, 80.5KB). When this is completed it will give guidance to University of Otago staff about the appropriate manner of storing data or information in non-University storage facilities.
Please contact Strategy and Planning if you would like to discuss this document further.
Useful links
A perspective on cloud computing for senior university decision makers
- What Campus Leaders Need to Know About Cloud Computing
- Enterprise Adoption of Public Cloud Services Is All About Pragmatic Tradeoffs: Practical and balanced benefit/risk assessments allow enterprises to see value in public cloud services- This Ovum Knowledge Centre paper outlines discussions with 10 enterprises that use public cloud services. The paper states that the carefully considered and appropriately governed use of the cloud is viewed as a positive addition to the enterprise ICT portfolio. (Reference Code: OI00130-040, Publication Date: 1 February 2012). All University staff and students have access to Ovum papers. Please contact ITS Strategy and Planning to find out how to access these papers.
- Cloud Computing in Higher Education - This Ovum Knowledge Centre paper provides a balanced assessment of the implications of cloud computing in higher education, offering recommendations to both institutions and technology vendors. (Publication Date: 15 October 2012). All University staff and students have access to Ovum papers. Please contact ITS Strategy and Planning to find out how to access these papers.
Useful tips on developing a business case for use of the cloud
Risks in cloud computing
- Managing the Risks of Operating in the Cloud (.pdf, 172KB)
- Government Use of Offshore Information and Communication Technologies (ICT) Service Providers
- Cloud, Risk and Security (.pdf, 1.78MB) - Publication by Dr Chris Roberts, 2012.
Important security aspects of the cloud
- Security Guidance for Critical Areas of Focus in Cloud Computing
- Symantec 2011 State of Cloud Survey- Global Findings (.pdf, 2.07MB)
- Cloud Computing Security
- Do They Measure Up? Assessing the Security Posture of Third-Party Service Providers
Useful tips for developing a contract for cloud services
- If It's in the Cloud, Get It on Paper
- How to negotiate a contract with a cloud or SaaS provider
- Cloud Computing Toolkit
Data classification
Recording keeping and cloud computing
- What are the Recordkeeping Implications of Cloud Computing?
- Advice on managing the recordkeeping risks associated with cloud computing
- A checklist for Records Management and the cloud
Cloud computing in the Health Sector
- "Unless an exemption is granted by the National Health IT Board, all personally identifiable health information and core operational data must be fully domiciled in New Zealand." Read the full article, Use of cloud computing for managing health information, for more information.
- The Health Information Privacy Code 2008 edition clearly states how the Privacy Rules relate to the collection and storage of Health Information.
Do you have a question? Please see our Frequently Asked Questions about cloud computing, or contact ITS Strategy and Planning for more information.