Geographic Isolation Consideration
Australia's geographic isolation from other cooperative members presents both challenges and advantages:
- Challenge: Latency to EU/UK for shared services (200-300ms); limited cross-jurisdiction DR options
- Challenge: Smaller domestic tech workforce; higher hardware shipping costs
- Advantage: Natural isolation from US infrastructure; clear geographic boundary
- Advantage: Strong domestic datacenter market (NEXTDC, Macquarie, AirTrunk)
Strategy: Australia operates more independently than other cooperative members but shares architecture, security standards, and platform components. Consider New Zealand partnership for regional DR.
Australian Governance Structure
| Role | Organisation | Responsibility |
|---|---|---|
| Political Authority | Prime Minister / National Cabinet | Emergency authorisation, federal-state coordination |
| Programme Lead | Digital Transformation Agency (DTA) | Whole-of-Government hosting strategy |
| Security Authority | ACSC (Australian Cyber Security Centre) | Security standards, IRAP certification |
| Signals Intelligence | Australian Signals Directorate (ASD) | Classified systems, Five Eyes coordination |
| Procurement | Department of Finance | Whole-of-Government procurement |
| Defence | Department of Defence | Defence classified workloads |
State and Territory Coordination
ACT (Canberra)
Federal government hub, GovDC location
New South Wales
Sydney datacenters, financial services
Victoria
Melbourne tech hub, state services
Queensland
Brisbane capacity, disaster resilience
Western Australia
Perth isolation, mining sector
South Australia
Adelaide space/defence hub
Australian Estimated Budget (Commonwealth Government)
Total Programme Cost: AUD $600M - $1.1B (initial) + $60-120M annual
Note: Commonwealth only. State/territory systems additional.
Phase 1: Commonwealth Emergency Declaration
Week 1-2- National Cabinet - PM authorises sovereign cloud emergency under national security
- DTA directive - Whole-of-Government hosting strategy redirected to sovereign-only
- ACSC activation - Emergency IRAP certification pathway established
- ASD briefing - Intelligence community implications assessed
- Procurement authority - Emergency procurement powers under national security
- International liaison - Coordination with UK, EU, Canada cooperative
- New Zealand engagement - Trans-Tasman DR arrangement explored
Phase 2: Infrastructure Deployment
Week 3-8- Canberra primary node - GovDC expansion with CloudStack deployment
- Sydney DR node - Secondary capacity at NEXTDC/Macquarie facilities
- Melbourne tertiary - Additional resilience for southern states
- Australian-owned providers - Contracts with Macquarie, NEXTDC, Telstra
- Network infrastructure - Secure inter-site connectivity (avoiding US transit)
- Security baseline - ISM-compliant security controls deployed
Phase 3: Platform Services & Critical Systems
Week 6-14- australia.gov.au - Federal portal migrated
- myGov - Citizen services platform migrated
- Centrelink - Social services payments (Services Australia)
- Medicare - Health services systems
- ATO - Australian Taxation Office systems
- Home Affairs - Immigration and border systems
- myHealth Record - National health records system
Phase 4: Agency Migration
Week 12-22- Core departments - PM&C, Treasury, Finance, DFAT migrated
- Services Australia - Complete migration of citizen services
- Health - Department and health agencies
- Education - Federal education systems
- Infrastructure - Transport, communications systems
- Defence (unclassified) - Non-classified Defence systems
- State coordination - Assist states with compatible migration where requested
Phase 5: US Cloud Exit
Week 20-24- Contract terminations - AWS, Azure, GCP contracts terminated
- Data deletion - Privacy Act compliance, data deletion verification
- Network verification - Confirm no data transit via US infrastructure
- IRAP certification - All systems certified to PROTECTED level
- BAU transition - Handover to operational teams
Five Eyes and AUKUS Consideration
Australia's participation in Five Eyes and AUKUS creates specific considerations:
- Intelligence sharing continues through appropriate government-to-government channels
- AUKUS technical cooperation on defence technology is separate from commercial cloud
- Sovereign cloud ensures Australian government controls what is shared and when
- US companies cannot be compelled to provide Australian government data without Australian legal process