FOI reference: FOI-2025-2549
You asked
Please can I request the following information:
1. The total spend on cloud providers, broken down by each provider for FY24/25
2. What cloud security vendors are used across cloud environments?
3. For each vendor in question 2, please can you provide:
What is the spend on these cloud security vendors?
Contract start date and length?
Suppliers for each contract?
4. What is the latest Cloud Strategy at ONS?
5. Are you using any CNAPP? (Cloud-native application protection platforms)
6. How many workloads do you have in the cloud?
7. % of total spend on cloud services rather than on-premises capabilities
We said
Thank you for your request. Please see the following answers to your questions.
1. Please see the associated download in response to your request.
2. CloudFlare
3. Answers are as follows:
£378,439.41
17/10/2022 3 year contract
CloudFlare
4. Cloud first. Multi-Cloud. Work in line with Central Digital and Data Office (CDDO) recommendations.
A summary of the Government and ONS Cloud Strategy is below:
UK Government can release significant savings through the effective use of Cloud technologies.
ONS is at the forefront of this, having delivered arguably one of the UK’s largest services using cutting edge cloud capabilities.
Cloud in ONS exists to help development teams implement and manage their environments.
Cloud also helps provide organisational oversight of security risks and costs associated with being in the Cloud.
5. Yes, we are using Microsoft Defender, Amazon Web Services Security Hub/Guardduty/Inspector and Google Cloud Security Command Center.
6. There are 8 distinct production business projects on AWS. We have circa 865 Cloud project accounts (or workloads) across the estate, each of which has a variety of services running in them.
7. 91% spent on cloud services.