🇦🇺

EMERGENCY MOBILISATION ROADMAP

Australia

24-week Commonwealth emergency programme for Australian Government sovereign cloud capability.

Geographic Isolation Consideration

Australia's geographic isolation from other cooperative members presents both challenges and advantages:

  • Challenge: Latency to EU/UK for shared services (200-300ms); limited cross-jurisdiction DR options
  • Challenge: Smaller domestic tech workforce; higher hardware shipping costs
  • Advantage: Natural isolation from US infrastructure; clear geographic boundary
  • Advantage: Strong domestic datacenter market (NEXTDC, Macquarie, AirTrunk)

Strategy: Australia operates more independently than other cooperative members but shares architecture, security standards, and platform components. Consider New Zealand partnership for regional DR.

Australian Governance Structure

Role Organisation Responsibility
Political Authority Prime Minister / National Cabinet Emergency authorisation, federal-state coordination
Programme Lead Digital Transformation Agency (DTA) Whole-of-Government hosting strategy
Security Authority ACSC (Australian Cyber Security Centre) Security standards, IRAP certification
Signals Intelligence Australian Signals Directorate (ASD) Classified systems, Five Eyes coordination
Procurement Department of Finance Whole-of-Government procurement
Defence Department of Defence Defence classified workloads

State and Territory Coordination

ACT (Canberra)

Federal government hub, GovDC location

New South Wales

Sydney datacenters, financial services

Victoria

Melbourne tech hub, state services

Queensland

Brisbane capacity, disaster resilience

Western Australia

Perth isolation, mining sector

South Australia

Adelaide space/defence hub

Australian Estimated Budget (Commonwealth Government)

AUD $400-700M Hardware CAPEX
AUD $120-250M Platform Development
AUD $80-160M Migration & Integration
AUD $60-120M Annual Operations

Total Programme Cost: AUD $600M - $1.1B (initial) + $60-120M annual
Note: Commonwealth only. State/territory systems additional.


Phase 1: Commonwealth Emergency Declaration

Week 1-2
  • National Cabinet - PM authorises sovereign cloud emergency under national security
  • DTA directive - Whole-of-Government hosting strategy redirected to sovereign-only
  • ACSC activation - Emergency IRAP certification pathway established
  • ASD briefing - Intelligence community implications assessed
  • Procurement authority - Emergency procurement powers under national security
  • International liaison - Coordination with UK, EU, Canada cooperative
  • New Zealand engagement - Trans-Tasman DR arrangement explored

Phase 2: Infrastructure Deployment

Week 3-8
  • Canberra primary node - GovDC expansion with CloudStack deployment
  • Sydney DR node - Secondary capacity at NEXTDC/Macquarie facilities
  • Melbourne tertiary - Additional resilience for southern states
  • Australian-owned providers - Contracts with Macquarie, NEXTDC, Telstra
  • Network infrastructure - Secure inter-site connectivity (avoiding US transit)
  • Security baseline - ISM-compliant security controls deployed

Phase 3: Platform Services & Critical Systems

Week 6-14
  • australia.gov.au - Federal portal migrated
  • myGov - Citizen services platform migrated
  • Centrelink - Social services payments (Services Australia)
  • Medicare - Health services systems
  • ATO - Australian Taxation Office systems
  • Home Affairs - Immigration and border systems
  • myHealth Record - National health records system

Phase 4: Agency Migration

Week 12-22
  • Core departments - PM&C, Treasury, Finance, DFAT migrated
  • Services Australia - Complete migration of citizen services
  • Health - Department and health agencies
  • Education - Federal education systems
  • Infrastructure - Transport, communications systems
  • Defence (unclassified) - Non-classified Defence systems
  • State coordination - Assist states with compatible migration where requested

Phase 5: US Cloud Exit

Week 20-24
  • Contract terminations - AWS, Azure, GCP contracts terminated
  • Data deletion - Privacy Act compliance, data deletion verification
  • Network verification - Confirm no data transit via US infrastructure
  • IRAP certification - All systems certified to PROTECTED level
  • BAU transition - Handover to operational teams

Five Eyes and AUKUS Consideration

Australia's participation in Five Eyes and AUKUS creates specific considerations:

  • Intelligence sharing continues through appropriate government-to-government channels
  • AUKUS technical cooperation on defence technology is separate from commercial cloud
  • Sovereign cloud ensures Australian government controls what is shared and when
  • US companies cannot be compelled to provide Australian government data without Australian legal process

Back to Emergency Mobilisation Hub