This blog post is a continuation of "What is cloud computing, and why do we need to care"
Nothing available at UiO seems promising?
Then you need to apply for a new cloud service to get it approved for use at UiO. However, unless a service meets the relevant requirements, there would be almost no chance that the service is going to be approved. For example, at the moment the fact that the service provider’s, or their sub-contractors' server resides in the U.S. means an immediate “NO”, due to so called "Schrems II decision".
To save your time and effort, keeping the following super important points in mind before you do further search for cloud services is a good idea:
- Is personal data processed by using the cloud service? If so, does the data remain within EU or the approved countries?
- Does the service satisfy Universal Design requirements?
- How much does it cost? Does it need to go through a procurement process?
The following page provides a short summary of these key points: «Hvordan kan man enklest mulig skli gjennom nåløyet?»
You found a new service that seems to satisfy your purpose and the key points above; what is the application process like?
Despite a service at least seems to satisfy the important points above, careful inspection and assessment may reveal that the service actually is not in line with necessary requirements. Therefore, we need a thorough process to assess the service and its provider before we can approve it and get it ready for use at UiO.
You can take a look at the following pages to get an idea that how the process is like as well as how the applications are assessed.
- The whole process of the application
- Summary of how applications for new services are assessed
- Check list (full) – you see, a new service needs to be assessed regarding so many points!!
Please note that we have quite limited resources, especially that of legal advisers. So a thorough risk-and-vulnerability analysis of a new service by you and your department would help not only yourself but also the others at UiO. Remember that all the applications need to be informed to the leadership at your department or faculty and be supported by them.
Please contact us and your local IT staff for further help
We in the TASK group receive applications for new cloud services and do the first screening, described at 3A shown at the “whole process” page. If you have any questions or anything is unclear, please feel free to contact to usit-cloud@usit.uio.no.