Part of NHS architecture principles
Public cloud first
Digital services should move to the public cloud unless there is a clear reason not to do so.
Summary
Digital services should move to the public cloud unless there is a clear reason not to do so.
Rationale
Cloud services provide many advantages including a reduction in the time to deploy infrastructure and a significant reduction in emissions.
Implication
With robust risk assessments and appropriate mitigations put in place, public cloud solutions can be suitable for digital health solutions, including those containing sensitive data.
Public cloud providers adhere to UK government compliance standards and best practices including:
- Cloud Security Principles (CSP)
- National Cyber Security Centre (NCSC) Cloud Security guidance
- Data Protection Act (DPA) 2018 and Health and Social Care Act 2012
Public cloud services offer a number of potential benefits, including scalability, flexibility, cost-effectiveness and access to innovation.
Solutions not deployed in Public cloud must ensure they can evidence the decision, business case and value for money behind their choice as described in the Government Cloud First guidance.
Last edited: 22 February 2024 9:04 am