Publication: Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology
Loading...
Date
2023-03-16
ISSN
Published
2023-03-16
Author(s)
Editor(s)
Abstract
This data classification matrix and cloud assessment framework supports the policy goals articulated in the World Bank’s Institutional and procurement practice note for cloud computing services in the public sector. The framework is intended to support World Bank client countries, practitioners, and multilateral and bilateral development partners to manage the risks of acquiring public cloud solutions. These suggestions are based on good practices identified in the practice note. The framework first offers a data classification scheme for government data and personally identifiable information (PII) of citizens that governments and their contractors handle based upon the confidentiality, integrity, and availability security objectives. The framework then suggests cloud security requirements corresponding to each proposed data classification level. These security requirements are based upon international standards and good practices identified in the practice note. The framework also offers a checklist for procuring agencies seeking to procure cloud services.
Link to Data Set
Citation
“World Bank. 2023. Data Classification Matrix and Cloud Assessment Framework: Cloud Assessment Framework and Evaluation Methodology. Equitable Growth, Finance & Institutions Insight - Governance. © World Bank. http://hdl.handle.net/10986/39550 License: CC BY-NC 3.0 IGO.”
Associated URLs
Associated content
Other publications in this report series
Journal
Journal Volume
Journal Issue
Related items
Showing items related by metadata.
Publication Institutional and Procurement Practice Note on Cloud Computing(Washington DC, 2023-03-16)Despite widespread awareness on the benefits of cloud computing, authorities in most of the World Bank’s client countries have not explored the opportunity of adopting cloud computing solutions. Task teams are finding it difficult to provide relevant advice to the counterparts and address their concerns. Most authorities have identified risks of moving to cloud computing: Will their data be safe? Will they have sovereign control over access to data stored offshore? Will privacy be protected? These risks are real. Due to an inadequate assessment framework to identify and assess these risks, the typical response of most client governments is to develop a government’s cloud (G-Cloud or GovCloud). This seems logical for more sensitive or mission critical data. However, this is not enough. Adopting a hybrid cloud model, which leverages the cloud services from the private sector to work in conjunction with the G-Cloud can offer immense opportunities to save costs, improve security, enhance performance, and strengthen resilience in a post COVID-19 world. However, client governments need guidance to change their policy response on cloud computing - from the risk-avoidance to the one of risk-management. This note provides guidance on institutional and procurement arrangements and risk mitigation methodology for acquiring and managing public cloud solutions using a whole-of-government approach.Publication Assessment of the Philippine Statistical Development Program 2005-2010 : Annexes(World Bank, 2010-06-01)The objective of this assessment of the Philippine Statistical Development Plan (PSDP) is to provide recommendations on how to improve the preparation, implementation, coordination, monitoring, and evaluation of the next PSDP during 2011-16. The report also gives two approaches to getting better treatment for the Philippine Statistical System (PSS) from the Department of Budget and Management (DBM), which supervises personnel levels under Executive Order (EO) 366. One is to petition for the earliest possible approval of the rationalization plans submitted by the Major Statistical Agencies (MSAs), inasmuch as the effects of EO 366 are much more benign after than before the approval of a rationalization plan. The other is to lobby with the National Economic and Development Authority (NEDA) for a declaration that statistics are a priority need, so that statistical development begins to be seen as a tool for improved governance and not as a regrettable burden on the budget. In addition, the report examines to what extent and how donor agencies could help with the financing of the next PSDP. Finally, with regard to the design of the next PSDP, the report recommends a much briefer document of about 100 pages than the most recent one with 700 pages. This can be achieved in part by relying more explicitly on the multi-year plans of the MSAs, so that the PSDP can focus on strategic issues, key priorities and budget requirements, cross-sectoral issues, and the development of statistical activities outside the MSAs.Publication Government Migration to Cloud Ecosystems(Washington, DC, 2022)Migrating from legacy IT infrastructure and data storage to cloud services can yield enormous benefits for governments: it can save governments money; increase the integrity, quality, and speed with which they deliver services; and provide access to the most advanced analytical tools and cybersecurity features available. These benefits have spurred a shift by governments across the globe away from legacy information technology (IT) systems, and towards cloud solutions, including public cloud services.Publication Advancing Cloud and Data Infrastructure Markets(Washington, DC: World Bank, 2024-05-23)“The World Development Report 2021: Data for Better Lives” underscored today’s unprecedented generation and flow of digital data and noted that much of the value remains untapped. To realize the enormous potential, data need to be supported by technologically advanced infrastructure to capture, analyze, share, and use them efficiently and effectively to benefit economies and societies. Cloud and data infrastructure presents the technological means to enable these processes, but the markets for these services are largely located in high-income countries. Countries with limited access to affordable services will lag in the ability to harness at scale the advanced technologies, such as machine learning and artificial intelligence, and to realize the potential corresponding social and economic gains. This report is part of a joint World Bank-IFC effort to support countries on their path to developing these markets. It analyzes the key drivers of cloud and data infrastructure growth in these settings. It examines the business models, policies, and regulatory environment shaping the market trends as data from public and private sectors migrate to the cloud and explores the challenges in attracting investments.Publication Assessment of the Philippine Statistical Development Program 2005-2010 : Main report(World Bank, 2010-06-01)The objective of this assessment of the Philippine Statistical Development Plan (PSDP) is to provide recommendations on how to improve the preparation, implementation, coordination, monitoring, and evaluation of the next PSDP during 2011-16. The report also gives two approaches to getting better treatment for the Philippine Statistical System (PSS) from the Department of Budget and Management (DBM), which supervises personnel levels under Executive Order (EO) 366. One is to petition for the earliest possible approval of the rationalization plans submitted by the Major Statistical Agencies (MSAs), inasmuch as the effects of EO 366 are much more benign after than before the approval of a rationalization plan. The other is to lobby with the National Economic and Development Authority (NEDA) for a declaration that statistics are a priority need, so that statistical development begins to be seen as a tool for improved governance and not as a regrettable burden on the budget. In addition, the report examines to what extent and how donor agencies could help with the financing of the next PSDP. Finally, with regard to the design of the next PSDP, the report recommends a much briefer document of about 100 pages than the most recent one with 700 pages. This can be achieved in part by relying more explicitly on the multi-year plans of the MSAs, so that the PSDP can focus on strategic issues, key priorities and budget requirements, cross-sectoral issues, and the development of statistical activities outside the MSAs.
Users also downloaded
Showing related downloaded files
Publication The Container Port Performance Index 2023(Washington, DC: World Bank, 2024-07-18)The Container Port Performance Index (CPPI) measures the time container ships spend in port, making it an important point of reference for stakeholders in the global economy. These stakeholders include port authorities and operators, national governments, supranational organizations, development agencies, and other public and private players in trade and logistics. The index highlights where vessel time in container ports could be improved. Streamlining these processes would benefit all parties involved, including shipping lines, national governments, and consumers. This fourth edition of the CPPI relies on data from 405 container ports with at least 24 container ship port calls in the calendar year 2023. As in earlier editions of the CPPI, the ranking employs two different methodological approaches: an administrative (technical) approach and a statistical approach (using matrix factorization). Combining these two approaches ensures that the overall ranking of container ports reflects actual port performance as closely as possible while also being statistically robust. The CPPI methodology assesses the sequential steps of a container ship port call. ‘Total port hours’ refers to the total time elapsed from the moment a ship arrives at the port until the vessel leaves the berth after completing its cargo operations. The CPPI uses time as an indicator because time is very important to shipping lines, ports, and the entire logistics chain. However, time, as captured by the CPPI, is not the only way to measure port efficiency, so it does not tell the entire story of a port’s performance. Factors that can influence the time vessels spend in ports can be location-specific and under the port’s control (endogenous) or external and beyond the control of the port (exogenous). The CPPI measures time spent in container ports, strictly based on quantitative data only, which do not reveal the underlying factors or root causes of extended port times. A detailed port-specific diagnostic would be required to assess the contribution of underlying factors to the time a vessel spends in port. A very low ranking or a significant change in ranking may warrant special attention, for which the World Bank generally recommends a detailed diagnostic.Publication Business Ready 2024(Washington, DC: World Bank, 2024-10-03)Business Ready (B-READY) is a new World Bank Group corporate flagship report that evaluates the business and investment climate worldwide. It replaces and improves upon the Doing Business project. B-READY provides a comprehensive data set and description of the factors that strengthen the private sector, not only by advancing the interests of individual firms but also by elevating the interests of workers, consumers, potential new enterprises, and the natural environment. This 2024 report introduces a new analytical framework that benchmarks economies based on three pillars: Regulatory Framework, Public Services, and Operational Efficiency. The analysis centers on 10 topics essential for private sector development that correspond to various stages of the life cycle of a firm. The report also offers insights into three cross-cutting themes that are relevant for modern economies: digital adoption, environmental sustainability, and gender. B-READY draws on a robust data collection process that includes specially tailored expert questionnaires and firm-level surveys. The 2024 report, which covers 50 economies, serves as the first in a series that will expand in geographical coverage and refine its methodology over time, supporting reform advocacy, policy guidance, and further analysis and research.Publication Digital Progress and Trends Report 2023(Washington, DC: World Bank, 2024-03-05)Digitalization is the transformational opportunity of our time. The digital sector has become a powerhouse of innovation, economic growth, and job creation. Value added in the IT services sector grew at 8 percent annually during 2000–22, nearly twice as fast as the global economy. Employment growth in IT services reached 7 percent annually, six times higher than total employment growth. The diffusion and adoption of digital technologies are just as critical as their invention. Digital uptake has accelerated since the COVID-19 pandemic, with 1.5 billion new internet users added from 2018 to 2022. The share of firms investing in digital solutions around the world has more than doubled from 2020 to 2022. Low-income countries, vulnerable populations, and small firms, however, have been falling behind, while transformative digital innovations such as artificial intelligence (AI) have been accelerating in higher-income countries. Although more than 90 percent of the population in high-income countries was online in 2022, only one in four people in low-income countries used the internet, and the speed of their connection was typically only a small fraction of that in wealthier countries. As businesses in technologically advanced countries integrate generative AI into their products and services, less than half of the businesses in many low- and middle-income countries have an internet connection. The growing digital divide is exacerbating the poverty and productivity gaps between richer and poorer economies. The Digital Progress and Trends Report series will track global digitalization progress and highlight policy trends, debates, and implications for low- and middle-income countries. The series adds to the global efforts to study the progress and trends of digitalization in two main ways: · By compiling, curating, and analyzing data from diverse sources to present a comprehensive picture of digitalization in low- and middle-income countries, including in-depth analyses on understudied topics. · By developing insights on policy opportunities, challenges, and debates and reflecting the perspectives of various stakeholders and the World Bank’s operational experiences. This report, the first in the series, aims to inform evidence-based policy making and motivate action among internal and external audiences and stakeholders. The report will bring global attention to high-performing countries that have valuable experience to share as well as to areas where efforts will need to be redoubled.Publication Global Economic Prospects, January 2025(Washington, DC: World Bank, 2025-01-16)Global growth is expected to hold steady at 2.7 percent in 2025-26. However, the global economy appears to be settling at a low growth rate that will be insufficient to foster sustained economic development—with the possibility of further headwinds from heightened policy uncertainty and adverse trade policy shifts, geopolitical tensions, persistent inflation, and climate-related natural disasters. Against this backdrop, emerging market and developing economies are set to enter the second quarter of the twenty-first century with per capita incomes on a trajectory that implies substantially slower catch-up toward advanced-economy living standards than they previously experienced. Without course corrections, most low-income countries are unlikely to graduate to middle-income status by the middle of the century. Policy action at both global and national levels is needed to foster a more favorable external environment, enhance macroeconomic stability, reduce structural constraints, address the effects of climate change, and thus accelerate long-term growth and development.Publication Global Economic Prospects, June 2025(Washington, DC: World Bank, 2025-06-10)The global economy is facing another substantial headwind, emanating largely from an increase in trade tensions and heightened global policy uncertainty. For emerging market and developing economies (EMDEs), the ability to boost job creation and reduce extreme poverty has declined. Key downside risks include a further escalation of trade barriers and continued policy uncertainty. These challenges are exacerbated by subdued foreign direct investment into EMDEs. Global cooperation is needed to restore a more stable international trade environment and scale up support for vulnerable countries grappling with conflict, debt burdens, and climate change. Domestic policy action is also critical to contain inflation risks and strengthen fiscal resilience. To accelerate job creation and long-term growth, structural reforms must focus on raising institutional quality, attracting private investment, and strengthening human capital and labor markets. Countries in fragile and conflict situations face daunting development challenges that will require tailored domestic policy reforms and well-coordinated multilateral support.