Publication: Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology
Loading...
Date
2023-03-16
ISSN
Published
2023-03-16
Author(s)
Editor(s)
Abstract
This data classification matrix and cloud assessment framework supports the policy goals articulated in the World Bank’s Institutional and procurement practice note for cloud computing services in the public sector. The framework is intended to support World Bank client countries, practitioners, and multilateral and bilateral development partners to manage the risks of acquiring public cloud solutions. These suggestions are based on good practices identified in the practice note. The framework first offers a data classification scheme for government data and personally identifiable information (PII) of citizens that governments and their contractors handle based upon the confidentiality, integrity, and availability security objectives. The framework then suggests cloud security requirements corresponding to each proposed data classification level. These security requirements are based upon international standards and good practices identified in the practice note. The framework also offers a checklist for procuring agencies seeking to procure cloud services.
Link to Data Set
Citation
“World Bank. 2023. Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology. Equitable Growth, Finance & Institutions Insight - Governance. © World Bank. http://hdl.handle.net/10986/39550 License: CC BY-NC 3.0 IGO.”
Associated URLs
Associated content
Other publications in this report series
Journal
Journal Volume
Journal Issue
Related items
Showing items related by metadata.
Publication Institutional and Procurement Practice Note on Cloud Computing(Washington DC, 2023-03-16)Despite widespread awareness on the benefits of cloud computing, authorities in most of the World Bank’s client countries have not explored the opportunity of adopting cloud computing solutions. Task teams are finding it difficult to provide relevant advice to the counterparts and address their concerns. Most authorities have identified risks of moving to cloud computing: Will their data be safe? Will they have sovereign control over access to data stored offshore? Will privacy be protected? These risks are real. Due to an inadequate assessment framework to identify and assess these risks, the typical response of most client governments is to develop a government’s cloud (G-Cloud or GovCloud). This seems logical for more sensitive or mission critical data. However, this is not enough. Adopting a hybrid cloud model, which leverages the cloud services from the private sector to work in conjunction with the G-Cloud can offer immense opportunities to save costs, improve security, enhance performance, and strengthen resilience in a post COVID-19 world. However, client governments need guidance to change their policy response on cloud computing - from the risk-avoidance to the one of risk-management. This note provides guidance on institutional and procurement arrangements and risk mitigation methodology for acquiring and managing public cloud solutions using a whole-of-government approach.Publication Assessment of the Philippine Statistical Development Program 2005-2010 : Annexes(World Bank, 2010-06-01)The objective of this assessment of the Philippine Statistical Development Plan (PSDP) is to provide recommendations on how to improve the preparation, implementation, coordination, monitoring, and evaluation of the next PSDP during 2011-16. The report also gives two approaches to getting better treatment for the Philippine Statistical System (PSS) from the Department of Budget and Management (DBM), which supervises personnel levels under Executive Order (EO) 366. One is to petition for the earliest possible approval of the rationalization plans submitted by the Major Statistical Agencies (MSAs), inasmuch as the effects of EO 366 are much more benign after than before the approval of a rationalization plan. The other is to lobby with the National Economic and Development Authority (NEDA) for a declaration that statistics are a priority need, so that statistical development begins to be seen as a tool for improved governance and not as a regrettable burden on the budget. In addition, the report examines to what extent and how donor agencies could help with the financing of the next PSDP. Finally, with regard to the design of the next PSDP, the report recommends a much briefer document of about 100 pages than the most recent one with 700 pages. This can be achieved in part by relying more explicitly on the multi-year plans of the MSAs, so that the PSDP can focus on strategic issues, key priorities and budget requirements, cross-sectoral issues, and the development of statistical activities outside the MSAs.Publication Government Migration to Cloud Ecosystems(Washington, DC, 2022)Migrating from legacy IT infrastructure and data storage to cloud services can yield enormous benefits for governments: it can save governments money; increase the integrity, quality, and speed with which they deliver services; and provide access to the most advanced analytical tools and cybersecurity features available. These benefits have spurred a shift by governments across the globe away from legacy information technology (IT) systems, and towards cloud solutions, including public cloud services.Publication Advancing Cloud and Data Infrastructure Markets(Washington, DC: World Bank, 2024-05-23)“The World Development Report 2021: Data for Better Lives” underscored today’s unprecedented generation and flow of digital data and noted that much of the value remains untapped. To realize the enormous potential, data need to be supported by technologically advanced infrastructure to capture, analyze, share, and use them efficiently and effectively to benefit economies and societies. Cloud and data infrastructure presents the technological means to enable these processes, but the markets for these services are largely located in high-income countries. Countries with limited access to affordable services will lag in the ability to harness at scale the advanced technologies, such as machine learning and artificial intelligence, and to realize the potential corresponding social and economic gains. This report is part of a joint World Bank-IFC effort to support countries on their path to developing these markets. It analyzes the key drivers of cloud and data infrastructure growth in these settings. It examines the business models, policies, and regulatory environment shaping the market trends as data from public and private sectors migrate to the cloud and explores the challenges in attracting investments.Publication Assessment of the Philippine Statistical Development Program 2005-2010 : Main report(World Bank, 2010-06-01)The objective of this assessment of the Philippine Statistical Development Plan (PSDP) is to provide recommendations on how to improve the preparation, implementation, coordination, monitoring, and evaluation of the next PSDP during 2011-16. The report also gives two approaches to getting better treatment for the Philippine Statistical System (PSS) from the Department of Budget and Management (DBM), which supervises personnel levels under Executive Order (EO) 366. One is to petition for the earliest possible approval of the rationalization plans submitted by the Major Statistical Agencies (MSAs), inasmuch as the effects of EO 366 are much more benign after than before the approval of a rationalization plan. The other is to lobby with the National Economic and Development Authority (NEDA) for a declaration that statistics are a priority need, so that statistical development begins to be seen as a tool for improved governance and not as a regrettable burden on the budget. In addition, the report examines to what extent and how donor agencies could help with the financing of the next PSDP. Finally, with regard to the design of the next PSDP, the report recommends a much briefer document of about 100 pages than the most recent one with 700 pages. This can be achieved in part by relying more explicitly on the multi-year plans of the MSAs, so that the PSDP can focus on strategic issues, key priorities and budget requirements, cross-sectoral issues, and the development of statistical activities outside the MSAs.
Users also downloaded
Showing related downloaded files
Publication World Development Report 2006(Washington, DC, 2005)This year’s Word Development Report (WDR), the twenty-eighth, looks at the role of equity in the development process. It defines equity in terms of two basic principles. The first is equal opportunities: that a person’s chances in life should be determined by his or her talents and efforts, rather than by pre-determined circumstances such as race, gender, social or family background. The second principle is the avoidance of extreme deprivation in outcomes, particularly in health, education and consumption levels. This principle thus includes the objective of poverty reduction. The report’s main message is that, in the long run, the pursuit of equity and the pursuit of economic prosperity are complementary. In addition to detailed chapters exploring these and related issues, the Report contains selected data from the World Development Indicators 2005‹an appendix of economic and social data for over 200 countries. This Report offers practical insights for policymakers, executives, scholars, and all those with an interest in economic development.Publication World Development Report 2011(World Bank, 2011)The 2011 World development report looks across disciplines and experiences drawn from around the world to offer some ideas and practical recommendations on how to move beyond conflict and fragility and secure development. The key messages are important for all countries-low, middle, and high income-as well as for regional and global institutions: first, institutional legitimacy is the key to stability. When state institutions do not adequately protect citizens, guard against corruption, or provide access to justice; when markets do not provide job opportunities; or when communities have lost social cohesion-the likelihood of violent conflict increases. Second, investing in citizen security, justice, and jobs is essential to reducing violence. But there are major structural gaps in our collective capabilities to support these areas. Third, confronting this challenge effectively means that institutions need to change. International agencies and partners from other countries must adapt procedures so they can respond with agility and speed, a longer-term perspective, and greater staying power. Fourth, need to adopt a layered approach. Some problems can be addressed at the country level, but others need to be addressed at a regional level, such as developing markets that integrate insecure areas and pooling resources for building capacity Fifth, in adopting these approaches, need to be aware that the global landscape is changing. Regional institutions and middle income countries are playing a larger role. This means should pay more attention to south-south and south-north exchanges, and to the recent transition experiences of middle income countries.Publication Remarks to the Annual Meetings 2020 Development Committee(World Bank, Washington, DC, 2020-10-16)David Malpass, President of the World Bank Group, announced that the Board approved a fast track approach to emergency health support programs that now covers 111 countries. Most projects are well advanced, with average disbursement upward of 40 percent. The goal is to take broad, fast action early. The operational framework presented back in June has positioned the Bank to help countries address immediate health threats and social and economic impacts and maintain our focus on long-term development. The Bank is making good progress toward the 15-month target of 160 billion dollars in surge financing. Much of it is for the poorest countries and will take the form of grants or low-rate, long-maturity loans. IFC, through the Global Health Platform, will be providing financing to vaccine manufacturers to foster expanded production of COVID-19 vaccines in both part 1 and 2 countries, providing production is reserved for emerging markets. The Development Committee holds a unique place in the international architecture. It is the only global forum in which the Governments of developed countries and the Governments of developing countries, creditor countries and borrower countries, come together to discuss development and the ‘net transfer of resources to developing countries.’ The current International Financial Architecture system is skewed in favor of the rich and creditor countries. It is important that all voices are heard, so Malpass urged the Ministers of developing countries to use their voice and speak their minds today. Malpass urged consideration of how we can build a new approach to debt restructuring that allows for a fair relationship and balance between creditors and debtors. This will be critical in restoring growth in developing countries; and helping reverse the inequality.Publication Classroom Assessment to Support Foundational Literacy(Washington, DC: World Bank, 2025-03-21)This document focuses primarily on how classroom assessment activities can measure students’ literacy skills as they progress along a learning trajectory towards reading fluently and with comprehension by the end of primary school grades. The document addresses considerations regarding the design and implementation of early grade reading classroom assessment, provides examples of assessment activities from a variety of countries and contexts, and discusses the importance of incorporating classroom assessment practices into teacher training and professional development opportunities for teachers. The structure of the document is as follows. The first section presents definitions and addresses basic questions on classroom assessment. Section 2 covers the intersection between assessment and early grade reading by discussing how learning assessment can measure early grade reading skills following the reading learning trajectory. Section 3 compares some of the most common early grade literacy assessment tools with respect to the early grade reading skills and developmental phases. Section 4 of the document addresses teacher training considerations in developing, scoring, and using early grade reading assessment. Additional issues in assessing reading skills in the classroom and using assessment results to improve teaching and learning are reviewed in section 5. Throughout the document, country cases are presented to demonstrate how assessment activities can be implemented in the classroom in different contexts.Publication Doing Business 2014 : Understanding Regulations for Small and Medium-Size Enterprises(Washington, DC: World Bank Group, 2013-10-28)Eleventh in a series of annual reports comparing business regulation in 185 economies, Doing Business 2014 measures regulations affecting 11 areas of everyday business activity: Starting a business, Dealing with construction permits, Getting electricity, Registering property, Getting credit, Protecting investors, Paying taxes, Trading across borders, Enforcing contracts, Closing a business, Employing workers. The report updates all indicators as of June 1, 2013, ranks economies on their overall “ease of doing business”, and analyzes reforms to business regulation – identifying which economies are strengthening their business environment the most. The Doing Business reports illustrate how reforms in business regulations are being used to analyze economic outcomes for domestic entrepreneurs and for the wider economy. Doing Business is a flagship product by the World Bank and IFC that garners worldwide attention on regulatory barriers to entrepreneurship. More than 60 economies use the Doing Business indicators to shape reform agendas and monitor improvements on the ground. In addition, the Doing Business data has generated over 870 articles in peer-reviewed academic journals since its inception.