Cloud services Objective Provide connectivity to a range of cloud services from the VGN. Reference Direction Benefit to government The VGN will implement a hybrid An integration platform will provide secure cloud integration platform. connectivity for the interchange of data, information and services: across government on-premise systems and cloud services, cloud systems, and agency systems (agency to agency including Service Victoria). for public source data for data.vic, and for API public consumption, e.g. mobile. An integration platform removes the need to implement to This ‘point point’ solutions. of systems improves flexibility (change without impact) and reduces system integration complexity and associated costs. Access to the internet from within The VGN internet gateway(s) will provide the VGN will only be permitted enhanced protection through an end-to-end from VGN-enabled internet service from defined and clearly managed gateway(s). connection points. All VGN internet gateways will be monitored by the approved government security operations centre service (SOC). The VGN will provide identity Identity federation (refer Identity, VGN-05) federation for use by cloud enables cloud services to use the VGN identity services. for authentication, improving security and removing the need for multiple user accounts. Private connections to cloud Connection to third-party systems outside of the services will be managed by the VGN will be assessed and managed by the network manager. network manager, ensuring access and security standards and maintained. The VGN will offer a range of On-demand computing managed through the computing services as network manager provides rapid delivery without part of the network compromising security. manager’s catalogue items. On-demand computing includes networking, servers, storage, applications and services.
Cloud services Objective Provide connectivity to a range of cloud services from the VGN. Reference Direction Benefit to government The VGN will implement a hybrid cloud integration platform. An integration platform will provide secure connectivity for the interchange of data, information and services: across government on-premise systems and cloud services, cloud systems, and agency systems (agency to agency including Service Victoria). for public source data for data.vic, and for API public consumption, e.g. mobile. An integration platform removes the need to implement ‘point to point’ solutions. This of systems improves flexibility (change without impact) and reduces system integration complexity and associated costs. Access to the internet from within the VGN will only be permitted from VGN-enabled internet gateway(s). The VGN internet gateway(s) will provide enhanced protection through an end-to-end service from defined and clearly managed connection points. All VGN internet gateways will be monitored by the approved government security operations centre service (SOC). The VGN will provide identity federation for use by cloud services. Identity federation (refer Identity, VGN-05) enables cloud services to use the VGN identity for authentication, improving security and removing the need for multiple user accounts. Private connections to cloud services will be managed by the network manager. Connection to third-party systems outside of the VGN will be assessed and managed by the network manager, ensuring access and security standards and maintained. The VGN will offer a range of computing services as part of the network manager’s catalogue items. On-demand computing managed through the network manager provides rapid delivery without compromising security. On-demand computing includes networking, servers, storage, applications and services.
ICT-Network-and-Cyber-Security-Statement-of-Direction-20160817.docx