2014-01-13 Deamalgamation Report Attachment

Page 76 of 95

Agility
Purchase ‘as a service’ from hosted         Significant time required to build data
infrastructure providers                    centres
Near instantaneous increases and reductions | Weeks/months to increase capacity of
in capaci                                   existing services
More responsive to organisational needs  PO
Pay for only what is used                   Fixed costs which cannot be recovered or
                                            are added to services making them more
                                            expensive for users

Shift focus from asset ownership to service Burdened by asset management
management
Tap into private sector innovation          De-coupled from private sector innovation
Encourages entrepreneurial culture          Risk averse culture
Better linked to emerging technologies   PO

Other Risks and Mitigation

Hosted infrastructure-based services raise new issues with regard to privacy, security,
trust, data loss, data transfer capacity and lock-in with hosted _ infrastructure
providers? and Noosa Shire Council will manage these risks in the following ways:

Privacy — contractual assurance from service providers regarding security and
access to data complies with all Federal and State legislation and Australian
Standards. Regular reviews will be undertaken in conjunction with service providers.

Security — it is acknowledged that many service providers will have better security
than most local governments due to the economies of scale that can be achieved
but also due to the recognition that government clients will require this e.g.
Department of Defence. Contractual assurance will be required on this together
with evidence of regular security penetration testing and information on attempted
security breaches.

Trust — scenario testing of full data and records extractions will be included during
and   after implementation of any hosted infrastructure solution. Contractual
conditions may also be required to ensure that a replicated copy of data is held
under escrow.

                    2 Gary Whitelaw, QGCIO — Presentation 11 July 2013

                                                                              Page 76 of 95