Publication:
Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology

Loading...
Thumbnail Image
Files in English
English PDF (1.72 MB)
1,120 downloads
English Text (67.14 KB)
46 downloads
Published
2023-03-16
ISSN
Date
2023-03-16
Author(s)
Editor(s)
Abstract
This data classification matrix and cloud assessment framework supports the policy goals articulated in the World Bank’s Institutional and procurement practice note for cloud computing services in the public sector. The framework is intended to support World Bank client countries, practitioners, and multilateral and bilateral development partners to manage the risks of acquiring public cloud solutions. These suggestions are based on good practices identified in the practice note. The framework first offers a data classification scheme for government data and personally identifiable information (PII) of citizens that governments and their contractors handle based upon the confidentiality, integrity, and availability security objectives. The framework then suggests cloud security requirements corresponding to each proposed data classification level. These security requirements are based upon international standards and good practices identified in the practice note. The framework also offers a checklist for procuring agencies seeking to procure cloud services.
Link to Data Set
Citation
World Bank. 2023. Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology. Equitable Growth, Finance & Institutions Insight - Governance. © World Bank. http://hdl.handle.net/10986/39550 License: CC BY-NC 3.0 IGO.
Digital Object Identifier
Associated URLs
Associated content
Report Series
Other publications in this report series
Journal
Journal Volume
Journal Issue

Related items

Showing items related by metadata.

  • Publication
    Institutional and Procurement Practice Note on Cloud Computing
    (Washington DC, 2023-03-16) World Bank
    Despite widespread awareness on the benefits of cloud computing, authorities in most of the World Bank’s client countries have not explored the opportunity of adopting cloud computing solutions. Task teams are finding it difficult to provide relevant advice to the counterparts and address their concerns. Most authorities have identified risks of moving to cloud computing: Will their data be safe? Will they have sovereign control over access to data stored offshore? Will privacy be protected? These risks are real. Due to an inadequate assessment framework to identify and assess these risks, the typical response of most client governments is to develop a government’s cloud (G-Cloud or GovCloud). This seems logical for more sensitive or mission critical data. However, this is not enough. Adopting a hybrid cloud model, which leverages the cloud services from the private sector to work in conjunction with the G-Cloud can offer immense opportunities to save costs, improve security, enhance performance, and strengthen resilience in a post COVID-19 world. However, client governments need guidance to change their policy response on cloud computing - from the risk-avoidance to the one of risk-management. This note provides guidance on institutional and procurement arrangements and risk mitigation methodology for acquiring and managing public cloud solutions using a whole-of-government approach.
  • Publication
    Assessment of the Philippine Statistical Development Program 2005-2010 : Annexes
    (World Bank, 2010-06-01) World Bank
    The objective of this assessment of the Philippine Statistical Development Plan (PSDP) is to provide recommendations on how to improve the preparation, implementation, coordination, monitoring, and evaluation of the next PSDP during 2011-16. The report also gives two approaches to getting better treatment for the Philippine Statistical System (PSS) from the Department of Budget and Management (DBM), which supervises personnel levels under Executive Order (EO) 366. One is to petition for the earliest possible approval of the rationalization plans submitted by the Major Statistical Agencies (MSAs), inasmuch as the effects of EO 366 are much more benign after than before the approval of a rationalization plan. The other is to lobby with the National Economic and Development Authority (NEDA) for a declaration that statistics are a priority need, so that statistical development begins to be seen as a tool for improved governance and not as a regrettable burden on the budget. In addition, the report examines to what extent and how donor agencies could help with the financing of the next PSDP. Finally, with regard to the design of the next PSDP, the report recommends a much briefer document of about 100 pages than the most recent one with 700 pages. This can be achieved in part by relying more explicitly on the multi-year plans of the MSAs, so that the PSDP can focus on strategic issues, key priorities and budget requirements, cross-sectoral issues, and the development of statistical activities outside the MSAs.
  • Publication
    Government Migration to Cloud Ecosystems
    (Washington, DC, 2022) World Bank
    Migrating from legacy IT infrastructure and data storage to cloud services can yield enormous benefits for governments: it can save governments money; increase the integrity, quality, and speed with which they deliver services; and provide access to the most advanced analytical tools and cybersecurity features available. These benefits have spurred a shift by governments across the globe away from legacy information technology (IT) systems, and towards cloud solutions, including public cloud services.
  • Publication
    Advancing Cloud and Data Infrastructure Markets
    (Washington, DC: World Bank, 2024-05-23) Gelvanovska-Garcia, Natalija; Mačiulė, Vaiva; Rossotto, Carlo Maria
    “The World Development Report 2021: Data for Better Lives” underscored today’s unprecedented generation and flow of digital data and noted that much of the value remains untapped. To realize the enormous potential, data need to be supported by technologically advanced infrastructure to capture, analyze, share, and use them efficiently and effectively to benefit economies and societies. Cloud and data infrastructure presents the technological means to enable these processes, but the markets for these services are largely located in high-income countries. Countries with limited access to affordable services will lag in the ability to harness at scale the advanced technologies, such as machine learning and artificial intelligence, and to realize the potential corresponding social and economic gains. This report is part of a joint World Bank-IFC effort to support countries on their path to developing these markets. It analyzes the key drivers of cloud and data infrastructure growth in these settings. It examines the business models, policies, and regulatory environment shaping the market trends as data from public and private sectors migrate to the cloud and explores the challenges in attracting investments.
  • Publication
    Financial Inclusion Data
    (International Finance Corporation, Washington, DC, 2011-10) International Finance Corporation; Global Partnership for Financial Inclusion
    The group of 20 (G-20) recognizes data and measurement as an essential foundation for advancing financial inclusion at a global level. The data and measurement sub-group, in its first year, was tasked to identify the existing financial inclusion data landscape, to assess the data gaps, to develop key performance indicators, and to lay out the foundations for the framing of financial inclusion target setting approaches. The purpose of this report, prepared for the global partnership for financial inclusion (GPFI), is to highlight the key findings and recommendations of the data and measurement sub-group during its first year, provide input for a roadmap for the GPFI's work plan for the coming year, and to present key policy recommendations for consideration by the G-20 policy makers for the Cannes summit in November 2011. The policy recommendations presented are relevant at the global level, including both G-20 and non-G-20 countries. The GPFI holds the potential for impact on two levels: (i) incorporating guidance on measurement frameworks and prioritizations of targets through GPFI country-level pilots; and (ii) aligning on the roadmap and determining a toolkit for formulating country level targets or goals to help - operationalize GPFI's universal access vision.

Users also downloaded

Showing related downloaded files

  • Publication
    The Container Port Performance Index 2023
    (Washington, DC: World Bank, 2024-07-18) World Bank
    The Container Port Performance Index (CPPI) measures the time container ships spend in port, making it an important point of reference for stakeholders in the global economy. These stakeholders include port authorities and operators, national governments, supranational organizations, development agencies, and other public and private players in trade and logistics. The index highlights where vessel time in container ports could be improved. Streamlining these processes would benefit all parties involved, including shipping lines, national governments, and consumers. This fourth edition of the CPPI relies on data from 405 container ports with at least 24 container ship port calls in the calendar year 2023. As in earlier editions of the CPPI, the ranking employs two different methodological approaches: an administrative (technical) approach and a statistical approach (using matrix factorization). Combining these two approaches ensures that the overall ranking of container ports reflects actual port performance as closely as possible while also being statistically robust. The CPPI methodology assesses the sequential steps of a container ship port call. ‘Total port hours’ refers to the total time elapsed from the moment a ship arrives at the port until the vessel leaves the berth after completing its cargo operations. The CPPI uses time as an indicator because time is very important to shipping lines, ports, and the entire logistics chain. However, time, as captured by the CPPI, is not the only way to measure port efficiency, so it does not tell the entire story of a port’s performance. Factors that can influence the time vessels spend in ports can be location-specific and under the port’s control (endogenous) or external and beyond the control of the port (exogenous). The CPPI measures time spent in container ports, strictly based on quantitative data only, which do not reveal the underlying factors or root causes of extended port times. A detailed port-specific diagnostic would be required to assess the contribution of underlying factors to the time a vessel spends in port. A very low ranking or a significant change in ranking may warrant special attention, for which the World Bank generally recommends a detailed diagnostic.
  • Publication
    Digital Progress and Trends Report 2023
    (Washington, DC: World Bank, 2024-03-05) World Bank
    Digitalization is the transformational opportunity of our time. The digital sector has become a powerhouse of innovation, economic growth, and job creation. Value added in the IT services sector grew at 8 percent annually during 2000–22, nearly twice as fast as the global economy. Employment growth in IT services reached 7 percent annually, six times higher than total employment growth. The diffusion and adoption of digital technologies are just as critical as their invention. Digital uptake has accelerated since the COVID-19 pandemic, with 1.5 billion new internet users added from 2018 to 2022. The share of firms investing in digital solutions around the world has more than doubled from 2020 to 2022. Low-income countries, vulnerable populations, and small firms, however, have been falling behind, while transformative digital innovations such as artificial intelligence (AI) have been accelerating in higher-income countries. Although more than 90 percent of the population in high-income countries was online in 2022, only one in four people in low-income countries used the internet, and the speed of their connection was typically only a small fraction of that in wealthier countries. As businesses in technologically advanced countries integrate generative AI into their products and services, less than half of the businesses in many low- and middle-income countries have an internet connection. The growing digital divide is exacerbating the poverty and productivity gaps between richer and poorer economies. The Digital Progress and Trends Report series will track global digitalization progress and highlight policy trends, debates, and implications for low- and middle-income countries. The series adds to the global efforts to study the progress and trends of digitalization in two main ways: · By compiling, curating, and analyzing data from diverse sources to present a comprehensive picture of digitalization in low- and middle-income countries, including in-depth analyses on understudied topics. · By developing insights on policy opportunities, challenges, and debates and reflecting the perspectives of various stakeholders and the World Bank’s operational experiences. This report, the first in the series, aims to inform evidence-based policy making and motivate action among internal and external audiences and stakeholders. The report will bring global attention to high-performing countries that have valuable experience to share as well as to areas where efforts will need to be redoubled.
  • Publication
    Empowerment in Practice : From Analysis to Implementation
    (Washington, DC: World Bank, 2006) Alsop, Ruth; Bertelsen, Mette; Holland, Jeremy
    This book represents an effort to present an easily accessible framework to readers, especially those for whom empowerment remains a puzzling development concern, conceptually and in application. The book is divided into two parts. Part 1 explains how the empowerment framework can be used for understanding, measuring, monitoring, and operationalizing empowerment policy and practice. Part 2 presents summaries of each of the five country studies, using them to discuss how the empowerment framework can be applied in very different country and sector contexts and what lessons can be learned from these test cases. While this book can offer only a limited empirical basis for the positive association between empowerment and development outcomes, it does add to the body of work supporting the existence of such a relationship. Perhaps more importantly, it also provides a framework for future research to test the association and to prioritize practical interventions seeking to empower individuals and groups.
  • Publication
    Global Economic Prospects, January 2025
    (Washington, DC: World Bank, 2025-01-16) World Bank
    Global growth is expected to hold steady at 2.7 percent in 2025-26. However, the global economy appears to be settling at a low growth rate that will be insufficient to foster sustained economic development—with the possibility of further headwinds from heightened policy uncertainty and adverse trade policy shifts, geopolitical tensions, persistent inflation, and climate-related natural disasters. Against this backdrop, emerging market and developing economies are set to enter the second quarter of the twenty-first century with per capita incomes on a trajectory that implies substantially slower catch-up toward advanced-economy living standards than they previously experienced. Without course corrections, most low-income countries are unlikely to graduate to middle-income status by the middle of the century. Policy action at both global and national levels is needed to foster a more favorable external environment, enhance macroeconomic stability, reduce structural constraints, address the effects of climate change, and thus accelerate long-term growth and development.
  • Publication
    The Container Port Performance Index 2020 to 2024: Trends and Lessons Learned
    (Washington, DC: World Bank, 2025-09-22) World Bank
    The Container Port Performance Index (CPPI) provides a global benchmark of how container ports perform in handling vessel calls. Developed jointly by the World Bank and S&P Global Market Intelligence, it measures the time ships spend in port and relates this to the number of containers moved during that time. This approach makes the CPPI a unique diagnostic tool that can highlight patterns in port operations and shed light on global and regional supply chain dynamics. Now in its fifth edition, the CPPI report covers the period from 2020 to 2024. It builds on a well-established methodology to generate scores for more than 400 container ports worldwide. Over time, the CPPI has become a trusted reference point for policymakers, industry stakeholders, and researchers who seek to understand how ports adapt to shocks, recover from disruptions, and identify opportunities for investments, reform and modernization. A major innovation in this edition is the introduction of multi-year trend analysis. Rather than presenting annual snapshots, the report now tracks how CPPI scores have changed across five years. This longitudinal perspective reveals shifts in port performance, showing where scores have risen, fallen, or remained stable. By linking these movements to external factors, the CPPI offers insights into how global and regional supply chains evolve under pressure. The results clearly mirror the crises that have shaken global trade. During the COVID-19 pandemic, CPPI scores in different regions declined sharply as congestion, equipment shortages, and delays overwhelmed many ports. By 2023, global averages rebounded in parallel with easing freight markets and reduced congestion. Yet 2024 brought new challenges: the Red Sea crisis disrupted major trade lanes, while climate-related constraints at the Panama Canal added further stress. These shocks were reflected in lower global and several regional average scores, underscoring the vulnerability of maritime transport to geopolitical and environmental events. The CPPI is not about comparing one port against another, but about understanding changes in performance over time. Ports that improved their scores often did so by reducing time at anchor, optimizing berth operations, investing in digital tools, and strengthening coordination across logistics partners. The evidence confirms that improvements are possible across ports of all sizes, and that rising scores are linked to deliberate actions to minimize time in port relative to containers moved. By consolidating five years of results, this edition transforms the CPPI into a long-term reference point. It shows how global crises have affected shipping, how different regions have adapted, and what lessons can be drawn for future resilience. The World Bank and S&P Global Market Intelligence remain committed to maintaining the CPPI as a global public good, providing transparency, comparability, and practical insights to support more reliable and sustainable maritime supply chains.