New Cloud Policy: Accelerating secure, modern government services

The Whole-of-government cloud computing policy provides a unified and practical framework for cloud adoption across the Australian Public Service (APS). It helps agencies move from ageing ICT environments to platforms that offer stronger resilience, scalability and security for government services.

The policy forms a key part of the Government’s broader work to modernise critical systems and improve the way Australians access and experience public services.  

“Cloud is a critical enabler of a modern public service that effectively delivers for the community,” explains Ms Lucy Poole, Deputy Chief Executive Officer, Strategy, Planning and Performance at the DTA.  

“This policy ensures agencies have the direction, guardrails and technical foundations needed to move off legacy systems. It guides them through adopting platforms that are secure, scalable and ready for emerging technologies, including artificial intelligence.”

Inside the policy

The Cloud policy applies to non-corporate Commonwealth entities, with corporate Commonwealth entities encouraged to adopt the policy where appropriate.

It supports a coordinated approach to planning, procuring and managing cloud environments. Simultaneously, advancing the Data and Digital Government Strategy by enabling agencies to deliver simple, seamless services built on scalable and secure architecture.

“With clear requirements in place, agencies can make more consistent and confident cloud decisions. This will lift the security, performance and long-term sustainability of the systems that underpin essential services accessed daily by Australians,” continues Ms Poole.

“Introducing this policy positions government to deliver faster, safer and more resilient services. It supports agencies to build the skills, infrastructure and governance required to meet the expectations of the community today and into the future.”  

The policy establishes five core requirements:

Prioritising cloud computing solutions

Agencies are encouraged to embed cloud considerations into new digital and ICT initiatives and transition from legacy systems in a strategic and coordinated way.  

Through mandatory integration with Digital Investment Plans, cloud planning is embedded from the outset of the digital investment process. Ensuring strategic alignment with whole-of-government priorities, greater transparency and a structured path for modernisation that drives better outcomes.  

Leveraging contemporary cloud technology

Modern cloud platforms enable innovation, interoperability and the responsible use of emerging technologies.  

This policy:

• Helps agencies design for interoperability and portability
• Provide access to computing power to support new technologies
• Support open standards that maximise data portability

Adopting cloud technologies responsibly and securely

Strong security, privacy and governance frameworks underpin responsible cloud adoption. The policy embeds essential accountability, compliance, security and responsibility practices for government entities using cloud services. Improving cost management and transparency

Cloud expenditure must be transparent, efficient and managed through effective and sustainable financial practices. The policy assist agencies to identify, measure and optimise their cloud expenditure.  

Nurturing cloud skills

A skilled and cloud-ready workforce is critical to ensure cloud services are effectively managed and secure.  

“Strong cloud capability is vital to the success of an enduring and effective digital transformation,” outlines Ms Poole. “This policy helps agencies plan the workforce, skills and governance needed to manage cloud services effectively and securely across government.”

Next steps

The Cloud Policy will take effect from the 1 July 2026.

The policy will be supported by annual reviews to track progress and respond to emerging needs. It will guide future digital investments and adoption decisions as the Australian Government continues to modernise core digital systems.

To explore the full cloud policy, please visit digital.gov.au.