Digital Service Providers: USA
The question
To ask the Secretary of State for Science, Innovation and Technology, what proportion of a) government departments b) critical public services and c) critical national infrastructure rely on US-owned cloud infrastructure; and what assessment her Department has made of the risks to UK data sovereignty and service continuity this poses.
Answered by Ian Murray
Survey results in the State of Digital Government Review state that around 55% of central government organisations reported that over 60% of their estate is now on the cloud. All survey participants indicated that they use one of two leading cloud providers, both of whom are US based.
Critical public services, including those delivered by arm’s length bodies and local authorities, operate under a range of governance and assurance arrangements. Responsibility for digital infrastructure decisions rests with the relevant accountable bodies, and there is no centralised record of the proportion of such services that use US-owned cloud infrastructure.
The government works closely with critical national infrastructure operators alongside our national technical authorities and industry partners. The government does not generally comment on national security or commercial matters related to CNI, including the use of individual suppliers.
‘Data sovereignty’ could cover numerous UK interests, including but not limited to economic, security, resilience, privacy, and diplomatic considerations. We will continue to seek to balance these objectives in our approach, to ensure the robustness of our digital services. UK public sector buyers of cloud services are advised to review their technology requirements against the Technology Code of Practice and consider the specific risk management and controls they need when procuring those services.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →