Skip to main content

Cloud Centre of Excellence governance

Cloud governance - how it works in practice

cloud governance how it works in practice

What this image shows

How do we build things right? 

Architecture board

Links to the 

Are we doing it right

Integrated governance links to

  • lead cloud architect
  • security lead
  • data privacy lead
  • data governance lead
  • IT finance lead
  • operations lead
  • business service owners
  • subject management experts as required 
  • Live Services board
  • Technical Review group

Provide cloud enablers

Integrated governance also has a relationship with the  sustainable hybrid cloud programme through the 


Governance route for cloud projects

governance route for cloud projects

Cloud projects follow the standard governance process plus the Cloud Hosting Request.

Some governance approvals may be waived for POC’s or beta systems

What the image shows

1. Capture needs in solution design overview, cloud risk data assessment and  key architecture decision. 

The application team contract Technical Review Group (TRG) for advice and guidance.

2. Complete cloud hosting request to request a cloud account. Cut off for CHR is 1 week before TRG meeting. 

3. TRG reviews solution and determines appropriate governance route to live. TRG meets every 2 weeks to review and approve solutions.  Cloud account issued by Cloud Centre of Excellence (CCoE). 

4. Develop product.

5. Review service readiness and recommend approval to go live.

6. Approved to go live. 

 


Use cases to illustrate governance routes

Use cases to illustrate governance routes

1. Live national service

  • Cloud hosting request is received
  • reviewed by the Technical Review Group (TRG).
  • develop product
  • complete service readiness report
  • the live services board meet to review
  • the approval is given for it to live 

2. Beta Test - National service in development

  • cloud hosting request is received
  • reviewed by the Technical Review Group (TRG)
  • develop product
  • draft service business report
  • the live services board meet to review

3. Proof of concept/proof of technology

  • cloud hosting request is received
  • reviewed by the Technical Review Group (TRG)
  • develop product
  • Capture and share PoC learnings
  • decommission

TRG documentation

TRG documentation

What this image shows

The solution design overview includes 

  • data classification risk assessment
  • architecture risk assessment 

It also has a relationship with the

  • cloud hosting request
  • key architectural decision
  • commercial off the shelf proposal  

Last edited: 7 March 2023 4:56 pm