Cloud risk assessments

Hi all, we seem to take a huge amount of time in my DHB with cloud risk assessments (we are talking months). We certainly comply with guidelines and I’m wondering if we are over-zealous? What are others experiences?

I think the key thing is that they need to be proportionate to risk, the highest risk of which is patient data used to make life death decisions.

My IT colleagues probably have a lower threshold of risk than a clinician does, which means adding controls or worrying about things that aren’t an issue to the organisation.

If you have the data it is filling in a DIA template and getting it signed off. I know we have done a number of CRAs - happy to get a list and share it here to help with reducing rework. Part of the delay for us has been getting data from vendors, part it is IT people not understanding the value of the answer (and wanting to go back to the business problem or requirements).

1 Like

Ditto, Ruth,

While not months, the workload for the CBA to use a DIA approved cloud provider seems disproportionate and a duplication of effort that the DIA supposedly has already done.

1 Like

How do we make this easier @jon_herries?

Is there maybe a way to share around as I bet we are duplicating?

1 Like

Here is the list (supplied to us by DIA in Feb)

Agency Name Cloud Solution Cloud Provider Category
Auckland DHB (ADHB) Patient Transport System St John Asset booking system
Auckland DHB and Waitemata DHB Workforce Central V8 Upgrade Project (Project 4156) Kronos Australia Pty Ltd HR -
Bay of Plenty DHB Rollex/Matox Rollex Medical Other
Bay of Plenty DHB Stellar Library Stellar Library LP Document management
Bay of Plenty DHB Datacom Services for Government (DCSG) Datacom
Canterbury District Health Board (CDHB) Diligent Boards Diligent Corporation Document management
Canterbury District Health Board (CDHB) Diligent Boards Diligent Corporation Document management
Capital & Coast DHB (CCDHB) McKesson Microsoft Azure Business Intelligence
Capital & Coast DHB (CCDHB) Smart Page OnCall Messaging
Counties Manukau DHB (CMDHB) Patient Transport System St John Asset booking system
Health and Disability Commissioner Amazon Web Services Amazon Database management systems
HealthShare Ltd Amplify Benefits Connexions Benefit Management
Ministry of Health (MoH) Apollo AscenderHCM NZ Ltd Payroll
Ministry of Health (MoH) Campaign Monitor Campa Email
Ministry of Health (MoH) Catalyst Cloud Catalyst IT Limited Web Hosting and Management Support
Ministry of Health (MoH) Oracle ERP (Finance) Oracle Financial reporting
Ministry of Health (MoH) Slack Slack Online collaboration and presentation software/portal
Ministry of Health (MoH) Adobe Experience Manager - interactive website Adobe Customer Relationship Management System
Ministry of Health (MoH) AskYour Team NZ Ltd AskYour Team Human resources management system
Ministry of Health (MOH) Totara LMS Cataylist Human resources management system
Ministry of Health (provider) Physio Fusion Cliniko / Amazon Web Services Customer Relationship Management System
Osteopathy Aotearoa Cliniko Red Guava Customer Relationship Management System
Rick Hansen Institute Global Research Platform RHIGRP.Net Research
Taranaki DHB Cortana Intelligence Suite Microsoft Business Intelligence
Taranaki DHB GROW-App Perinatal Institute Business Intelligence
Taranaki DHB PowerBI Microsoft Business Intelligence
Taranaki DHB Novatus ???
Taranaki DHB epiCentre University of Wollongong Other
Waikato DHB AMiON Acute Rostering System Spiral Software Human resources management system
Waikato DHB Better Impact Better Impact Pty Limited (Canada) Human resources management system
Waikato DHB Cat-Trax Amazon Web Services Other
Waikato DHB Diligent BoardBooks Diligent Governance, risk and compliance
Waikato DHB Drive Safe Drive Aware Pearson Other
Waikato DHB Everlight PAC Everlight Australia Medical screening system
Waikato DHB GETINGE Group GETINGE Group Medical screening system
Waikato DHB HealthTap HealthTap Medical screening system
Waikato DHB Q-Global Application Pearson Medical screening system
Waikato DHB Fisher & Paykel Infosmart Fisher & Paykel - Rackspace Hosting Other
Waitemata DHB Patient Transport System St John Asset booking system
Waitemata DHB HSPnet Reverra HR - Recruitment
West Coast District Health Board Core Schedule Core Schedule NZ Ltd Other
Taranaki DHB Amazon Web Services Spark/Kinross Document storage
WDHB (Waitemate DHB) Microsfot Azure Flink Solutions Ltd Human resources management system
CDHB (Canterbury DHB) KeyedIn CDHB Other
NPDHB (New Plymouth DHB) COMET ANZICS, Melbourne, Australia Business Intelligence
Canterbury District Health Board (CDHB) Magiq Software Ltd Magiq Financial reporting
Bay of Plenty DHB MCP IaaS: DCSG Datacom Cloud Services for Governmnet Other
Bay of Plenty DHB Re-leased www.re-leased.com Asset booking system
Bay of Plenty DHB COMET/CORE NAZICS Centre for Outcome and Resource Evaluation Business Intelligence
Canterbury District Health Board (CDHB) Fingermark Check in Kiosk Fingermark Ltd Customer Relationship Management System
Canterbury District Health Board (CDHB) Interlad Workflow Interlad Workflow Other
HealthShare Ltd eSpace Programme ??? Other
Hawkes Bay DHB COMET/CORE NAZICS Centre for Outcome and Resource Evaluation Business Intelligence
Bay of Plenty DHB CommVault Cloud metrices Reporting Commvault IT security and maintenance
Bay of Plenty DHB HPT Insight Online HP Enterprise IT security and maintenance
Bay of Plenty DHB TourTrax.Net Maximus Technologies Ltd IT security and maintenance
Bay of Plenty DHB Losant Washtech IT security and maintenance
Taranaki DHB LifeNet Stryker Other
Taranaki DHB Novatus Conga Document management
CDHB (Canterbury DHB) Deloitte Assist Deloitte Other
1 Like