DTA releases cloud computing guidance for government agencies

The Digital Transformation Agency has released the Whole-of-Government Cloud Computing Guidance to help Australian Government agencies implement the Cloud Computing Policy, which came into effect on 1 July 2026.

The guidance provides practical advice across the full cloud lifecycle, covering strategy, security, procurement, cost management, workforce capability and legacy system retirement. It is designed to help agencies translate policy requirements into action and navigate common implementation challenges.

The Cloud Computing Policy prioritises cloud for new digital and ICT initiatives and upgrades, while acknowledging that approaches will need to be tailored to each agency's circumstances. The guidance walks agencies through the policy's framework for secure, responsible and effective cloud adoption, with the aim of supporting a consistent approach across government.

Key areas covered include developing cloud strategies aligned with business outcomes, managing migration and legacy retirement together, strengthening security and operational resilience, applying FinOps practices to connect cloud spending with business value, and building internal skills to manage cloud services over time.

The guidance also addresses AI-enabled cloud services, noting that expenditure can vary significantly depending on usage patterns and that early planning around consumption controls will help agencies manage costs and ensure AI investment delivers intended outcomes.

On security, the guidance makes clear that while cloud providers are responsible for securing their environments, agencies remain accountable for protecting their own information, systems and services. Establishing clear responsibilities between agencies and providers is described as central to managing shared risk.

"Cloud is fundamental to how government operates and delivers services. Getting it right means looking beyond the technology and making choices that support better services, stronger resilience and long-term value," said Ramsey Beydoun, acting deputy chief executive officer of strategy, planning and performance at the DTA.

"There is no single pathway to successful cloud adoption. The guidance gives agencies practical advice to navigate trade-offs and make informed decisions at every stage of their cloud journey."