Government to strengthen security and governance rules for cloud, data hosting platforms

The Department of Home Affairs has issued new rules for cloud and data-hosting platforms used by the Australian Government. According to Home Affairs, these platforms will need to meet stronger security standards under reforms proposed to the Hosting Certification Framework (HCF).

The HCF is intended to provide assurance hosting platforms managing sensitive and classified government data meet stringent security and governance standards, Home Affairs said. The framework defines controls across hosting infrastructure, supply chains, and cyber and technology dependencies.

Central to the reform is the HCF Deed of Certification, which the department said underpins the obligations for certified hosting providers. Standardising the Deed will improve consistency and assurance and strengthen the security of environments hosting government data and information, the government said.

“The cyber threat landscape has changed significantly, and our approach to securing government‑hosted data and information must change with it. These reforms ensure hosting platforms are better equipped to protect the data, information and systems Australians rely on,” said Critical Infrastructure & Protective Security Deputy Secretary, Brendan Dowling.

“Modernising the Hosting Certification Framework strengthens the security foundations of government digital services, providing greater confidence that sensitive information is protected to a consistently high standard.”

Consultation on the revised Deed of Certification will run for six weeks and is aimed exclusively at existing HCF certified service providers.