Showing posts with label ARK Continuity. Show all posts
Showing posts with label ARK Continuity. Show all posts

Thursday, 14 February 2013

Skyscape – would you invest £4 million? Thousands haven't.

There are other cloud computing suppliers than Skyscape.
Some of them comparatively well-established.
What is Whitehall doing?
How did the Cabinet Office and the Government Procurement Service
manage to give G-Cloud accreditation to Skyscape?
And how did the MOD, HMRC and GDS
decide that Skyscape is a safe home for our data?

Skyscape's first accounts appeared on the Companies House website today.

Is Mr Jeremy Robin Sanders still in ultimate control of the company?

Yes.

Except that it's become a bit indirect. He set up a company called Virtual Infrastructure Group Ltd (VIG) in June 2012. Then in October 2012 he transferred all his Skyscape shares into VIG. So VIG controls Skyscape. But Mr Sanders controls VIG.

How is Skyscape financed?

Not by equity, that's for sure. VIG has £180 £1,180 of ordinary shares and Skyscape has £1,000.

Mr Sanders lent some money to Skyscape and the balance outstanding at 31 March 2012 was £93,333. But that's not a lot to fund an operation meant to be able to support the Government Digital Service (GDS), HMRC and MOD contracts let to Skyscape. So what other money is there available?

Answer, in November 2012 – well after getting the GDS and HMRC contracts – a loan note financing exercise was launched. £12 million-worth on offer, of which £8 million-worth had been subscribed for by 7 February 2013, the date on which the Skyscape accounts were signed by Mr Sanders and the auditors, Grant Thornton.

Who are these subscribers/investors? We don't know.

What we do know is that, as set out in the Particulars of a mortgage or charge filed with Companies House on 14 November 2012, if Skyscape goes into receivership or administration or ..., then the noteholders get all the assets, which may include GDS's data (our data), HMRC's data (our data) and the MOD's data (our data).

And who's managing the loan notes? That's the other thing we know. Jeffrey Paul Thomas (15 active companies to his name and 45 inactive ones).

Who?

You remember Jeffrey. He's the man who once held some shares in Skyscape but transferred them to Jeremy. He's the man at ARK Continuity, the data centre specialist, with the Rt Hon The Baroness Manningham-Buller on board, funded by Real Estate Venture Capital Partners LLP (RevCap).

The business review in the Skyscape accounts makes it clear that Skyscape was set up explicitly as a speculative venture designed to exploit changes in UK government IT procurement, particularly G-Cloud, the move to cloud computing.

How's it going?

By 31 March 2012 Skyscape had sales of £44,416 which cost them £327,320 and they'd spent £956,965 on administration. There's no detailed P&L in the accounts, but there is a balance sheet showing negative net assets of £1,240,833.

A bit precarious. Just what you'd expect from a speculative venture. It might come right. You never know. Bit worrying that they couldn't get all the notes away, prospective investors not overly impressed.

Still, there's Whitehall in the background. They could make Skyscape a success. As long as Skyscape is well enough managed actually to cope with a lot of contracts.

And there's Cisco and VMware and EMC and QinetiQ in the background, the Skyscape Cloud Alliance. Skyscape is their Trojan horse. They'll extend their credit terms for a while yet but their patience won't be infinite.

G-Cloud, on which Skyscape largely depends – that's one of the Principal Risks And Uncertainties listed in the accounts – released some sales data last week. It's very early days yet. But between April and December 2012 G-Cloud sold just under £6 million of services. Emergn Ltd got 24% of those sales, BJSS 14% and Ninian 9%. 50 suppliers on the list, everyone else is an also-ran so far, including Skyscape with 2%.

Patience. Tested.

And remember. At some stage, G-Cloud may admit the big boys, Amazon and Google.

----------

(NB DMossEsq is absolutely not licensed to give investment advice.)

Skyscape – would you invest £4 million? Thousands haven't.

There are other cloud computing suppliers than Skyscape.
Some of them comparatively well-established.
What is Whitehall doing?
How did the Cabinet Office and the Government Procurement Service
manage to give G-Cloud accreditation to Skyscape?
And how did the MOD, HMRC and GDS
decide that Skyscape is a safe home for our data?

Skyscape's first accounts appeared on the Companies House website today.

Is Mr Jeremy Robin Sanders still in ultimate control of the company?

Yes.

Except that it's become a bit indirect. He set up a company called Virtual Infrastructure Group Ltd (VIG) in June 2012. Then in October 2012 he transferred all his Skyscape shares into VIG. So VIG controls Skyscape. But Mr Sanders controls VIG.

How is Skyscape financed?

Not by equity, that's for sure. VIG has £180 £1,180 of ordinary shares and Skyscape has £1,000.

Wednesday, 24 October 2012

HMRC and Skyscape 2

The following open letter has been sent by email and by post to Phil Pavitt in his capacity as HMRC Director General Change, Security and Information with a copy to Lin Homer, Chief Executive, HMRC:

[Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

Open letter [1]

Phil Pavitt          Your ref. CETO /03531/2012
HMRC Director General
Change, Security and Information
100 Parliament St
London SW1A 2BQ          24 October 2012

Dear Mr Pavitt

HMRC and Skyscape Cloud Services Ltd

Thank you for your letter dated 22 October 2012 [2] in response to my letter to Lin Homer dated 11 October 2012 [3].

The point is well taken, of course, that for security reasons HMRC can’t say what data is held where. We're in we-can-neither-confirm-nor-deny territory here. It’s difficult but, given the bizarre nature of the Skyscape contract, HMRC are going to have to find some way to reassure the public about the security with which our tax records, both personal and corporate, are being held.

“The data will continue to be kept in accordance with existing legislation and HMRC security policies”, you say. I should hope so, too – the public want, need, deserve and pay for nothing less.

But your statement begs the question.

The public is bound to assume that the data to be stored at Skyscape’s cloud computing facilities is the tax records of every individual and legal person in the country. What other data does HMRC have?

And the public is bound to assume that our data is intended to be stored at Hartham Park, Corsham, Wilts SN13 0RP because that’s the address of the registered office of Skyscape Cloud Services Ltd and it’s the address of the registered office of its “ally” ARK Continuity Ltd and it’s the address of ARK’s Spring Park data centre as noted for everyone to see on ARK’s website [4]. If that isn’t a breach of security, what is?

Skyscape is a young start-up, it hasn’t yet submitted any accounts to Companies House, it has no track record, it has only one director and he owns all the shares in the company. If the Government Procurement Service (GPS) and HMRC believe that Skyscape is an appropriate company to trust with the care of our tax records, then there is something wrong with GPS’s and HMRC’s selection criteria.

CloudStore make the point that the inclusion of a company and its services in its on-line store is not a warranty of appropriateness. It’s up to the customer – in this case HMRC – to determine appropriateness. Eleanor Stewart, the Assistant Director of G-Cloud, says [5]: “as with everything on the G-Cloud framework the customer can determine whether they are happy with any associated risk at the point of selection”.

The references to GPS and to CloudStore in your letter can provide the public with no comfort.

You mention the Skyscape Cloud Alliance [6] in your letter.

Goodness knows what ARK Continuity is doing in the Alliance. HMRC doesn’t promote itself as being in an alliance with Mapeley. Why does Skyscape expect the public to find it commercially persuasive to include its landlord in the Alliance?

QinetiQ, VMware, Cisco and EMC on the other hand are all industry leaders and if HMRC had entered into a contract with a joint venture company involving them then we wouldn’t be having this correspondence.

But you haven’t.

HMRC have entered into a contract with a one-man start-up. That was the case before you wrote your letter and it remains the case subsequently. The question therefore persists, how can HMRC make such an odd-looking decision? How can they risk the nation’s tax records on Skyscape?

There’s no joint venture company there for a Tax Inspector to get his or her teeth into. Just an “alliance”. What is an alliance in this case?

The contract is to provide cloud computing services. “Cloud computing” means losing control [7]. Whitehall promotes cloud computing on the basis that it turns IT into a utility [8]. That is not attractive, as this month’s news about gas and electricity prices will confirm.

None of us has control over the price our suppliers charge for gas and electricity at home or control over their staff. If HMRC enter into a cloud computing contract with any supplier, big or small, they will have the same problem. How can HMRC risk the nation’s tax records on cloud computing?

Salesmen sometimes unfortunately make over-enthusiastic claims about cloud computing being more resilient, secure and efficient than the alternatives. Lawyers don’t believe them. Lawyers don’t use cloud computing. Lawyers are paid to keep their clients’ data under control and confidential. So are public authorities like HMRC.

As I write, I note that the latest cloud computing débâcle is unfolding. Amazon are the biggest cloud computing suppliers in the world and they’ve just had a 12-hour outage [9].

Our tax records are currently stored on hundreds of servers at “multiple” HMRC offices, you say. Good. That looks secure. Much more secure than storing them all in one place with a one-man start-up in some sort of nugatory alliance. And, since you mention it, the allegedly dainty carbon footprint of cloud computing will be no consolation if our records go up in smoke.

According to HMRC’s press release [10] the Skyscape contract will save £1 million a year on running costs. We need to be guided here by the National Audit Office (NAO) report on HMRC’s on-line filing [11].

The NAO examined HMRC’s £8 billion 10-year ASPIRE contract with Capgemini and said:

HMRC uses a range of indicators to measure the performance of its ICT services, which include online services, and it measures availability that relates specifically to online filing. HMRC has a high-level view of the overall costs of ICT provision through the ASPIRE contract. It has been taking steps to improve that information and achieve cost savings. It does not yet have a detailed breakdown of the costs of online filing services, so it cannot benchmark those costs to assess their value for money. HMRC is currently negotiating with the ASPIRE contractors to obtain a clearer breakdown of the costs of ICT services provided. (p.8)
Also:

[HMRC] should proceed with its plans to identify ICT costs specific to online filing services and ensure that current negotiations with the ASPIRE contractors provide sufficient breakdown of cost information for regular benchmarking of costs. (p.13)
In the circumstances, with the suppliers not even prepared to tell HMRC what they are charging for, some scepticism is in order about claims to be able to identify £1 million of on-line filing costs in among the £8,000 million.

CESG have rescued the nation before from other-worldly decisions taken by Whitehall. The Home Office wanted to use DWP’s National Insurance number database as the National Identity Register for the ID cards scheme. CESG pointed out that it was inappropriate and that was the end of that [12].

Let’s hope that they repeat the trick in their review of Skyscape. I look forward to a small piece appearing in the technical press somewhere out of the way regretting that for security reasons which cannot be given the HMRC contract with Skyscape has had to be revoked.

Yours sincerely
David Moss

cc      Lin Homer, Chief Executive, HMRC
          Chartered Institute of Taxation
          Institute of Chartered Accountants in England and Wales




[7]Cloud computing and the Gadarene lemmings of Whitehall, http://www.dmossesq.com/2012/10/cloud-computing-and-fashion-conscious.html
[8]Cloud computing turns IT into a utility, and that's a good thing?, http://www.dmossesq.com/2012/10/cloud-computing-turns-it-into-utility.html
[9]Amazon outage started small, snowballed into 12-hour event, http://www.networkworld.com/news/2012/102312-amazon-outage-263617.html
[11]HM Revenue & Customs – The expansion of online filing of tax returns, http://www.nao.org.uk//idoc.ashx?docId=cd237708-5c6b-472a-af13-f432f80d80cc&version=-1
Updates:
24.5.12
Phil Pavitt says "we don't currently have ID authentication in UK government".
24.10.12
Letter emailed to Phil Pavitt and Lin Homer
25.10.12
Hard copy of letter posted to Phil Pavitt and Lin Homer, links sent to Eleanor Stewart, CIOT and ICAEW
28.10.12
Re last two paragraphs of letter, see Andy Smith affair.
4.11.12
US government argue that signing a cloud services agreement reduces your property rights in the data stored in the cloud, according to EFF.
13.11.12
Cloud computing, and GDS's fantasy strategy: "To which, all one can say is that there must be something wrong with the Cabinet Office, GPS and HMRC procurement criteria ...".
23.11.12
UK.gov to upgrade buying tool after mega cockup downs £1bn deal – Government Procurement Service computer system incapable of handling tenders for government procurement.
26.11.12
HMRC soon to be Pavittless – will Aviva store all our insurance details with Skyscape?

HMRC and Skyscape 2

The following open letter has been sent by email and by post to Phil Pavitt in his capacity as HMRC Director General Change, Security and Information with a copy to Lin Homer, Chief Executive, HMRC:

[Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

Monday, 22 October 2012

Things happen when Lin Homer's in the loop. Fast.

An open letter was sent to HMRC by email and by post asking about the advisability of contracting with Skyscape Cloud Services Ltd.

An acknowledgement was received today by post promising a response within 15 working days.

And then the response was received, as shown below, dated today. Unprecedented.

With thanks to Phil Pavitt, responding on behalf of Ms Homer, and no further comment for the moment:

[Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

HMRC and Skyscape Cloud Services Ltd

Dear Mr Moss

Thank you for your letter of 11 October 2012 expressing your concerns in respect of HMRC’s recently announced contract with Skyscape Cloud Services Ltd. I am replying on behalf of HMRC’s Chief Executive, Lin Homer.

Skyscape were selected by HMRC and awarded a 12 month contract due to their innovative, inventive and value for money solution. In terms of the suitability of Skyscape hosting HMRC data I can confirm that HMRC procured the services of Skyscape via the HM Government “G-Cloud” Framework, also referred to  as the CloudStore. The G-Cloud was created by the Cabinet Office and the Government Procurement Services (GPS) via a formal competition process through the Official Journal of the European Union under the Open Procedure.

G-Cloud was established to make government procurement easier and more transparent and was, in part, created as a means of encouraging small and medium sized enterprises (SMEs) to compete on a level playing  field with multi-national organisations.

In order to deliver services through G-Cloud, all suppliers on the Framework, Skyscape included, were required to meet a set of mandatory criteria set out by GPS including their financial standing and Experian risk assessments. Additionally, HMRC carried out its own standard taxation and financial compliance checks  before awarding the contract and Skyscape passed the standard set by the G-Cloud Framework and HMRC.

Skyscape’s services are provided through a number of key, or “Alliance”, Partners. These partners are industry leading organisations that provide services in the data centre or “cloud” arena such as EMC (storage  and security services), Cisco (networking) and Ark Continuity (UK based high security data centres). Ark Continuity therefore are one of a number of partners who supply Skyscape with their products and services which are key to Skyscape’s overall assured cloud computing services.

However, data security remains integral to HMRC and a pre-requisite of any of our data being migrated to Skyscape is for their solution, including all the constituent parts, to be formally accredited by CESG (the Communications-Electronics Security Group) to Impact Level 3 (IL3). For more information please see the link below:

http://gcloud.civilservice.gov.uk/2012/03/09/so-what-is-il3-a-short-guide-to-business-impact-levels/

This accreditation is expected imminently, at which point HMRC will be in a position to begin securely moving data over to Skyscape and decommissioning our old servers. Once the data has been moved it will remain there for the contract duration (12 months) during which time any subsequent data storage contract will be re-competed to ensure HMRC continues to take advantage of innovative, secure and low cost solutions, available within the marketplace, which allow HMRC to easily store, manage and transfer its data.

It should also be noted that for security reasons HMRC does not discuss details of the data that it holds, or where it stores it, however we are able to confirm that by using Skyscape HMRC data will continue to be kept in accordance with existing legislation and HMRC security policies.

Finally, I can confirm that the claims within HMRC’s press release of 26 September are fully justified. The data, which will be securely stored by Skyscape, currently resides on several hundred servers, across multiple HMRC office locations. This change will consolidate that data and place it into a small number of secure and highly resilient cloud data centres hence improving the security of the data, the efficiency of managing that data as well as improving HMRC’s carbon footprint.

I trust that this answers your queries in full and I hope that you can now appreciate that HMRC’s decision to contract with Skyscape was not dangerous, ill-advised or irresponsible.

Yours sincerely,
Regards
Phil Pavitt
HMRC Director General Change, Security and Information

Things happen when Lin Homer's in the loop. Fast.

An open letter was sent to HMRC by email and by post asking about the advisability of contracting with Skyscape Cloud Services Ltd.

An acknowledgement was received today by post promising a response within 15 working days.

And then the response was received, as shown below, dated today. Unprecedented.

Friday, 19 October 2012

Cloud computing turns IT into a utility, and that's a good thing?

The interesting thing about cloud computing
is that we've redefined cloud computing
to include everything that we already do...
The computer industry is the only industry
that is more fashion-driven than women's fashion.
Maybe I'm an idiot,
but I have no idea what anyone is talking about.
What is it?
It's complete gibberish.
It's insane.
When is this idiocy going to stop?

Cloud computing is cheaper, better, faster, easier, ... because it turns IT into a utility. In fact it's a no-brainer. So says Whitehall's G-Cloud team, reading from the industry hymn-sheet.

DMossEsq doesn't think that emulating the utilities markets is obviously a very good idea. Neither does Richard Stallman. And as for Larry Ellison, all $41 billion-worth of him, he thinks cloud computing announcements are "fashion-driven" and "complete gibberish", see above. And below.

But never mind Messrs Stallman and Ellison and DMossEsq, take a look at the past week's utilities news and you decide, what do you think? Is this where you want public money spent? Your money?

Don't bother working on the answer too hard by the way because actually it doesn't matter what you think. HMRC have already contracted with Skyscape Cloud Services Ltd to put your tax data in the cloud and GDS – the Government Digital Service – have already contracted with the same company to put all your benefits data up there in the cloud, too.

A
The big guns:

• 14 January 2011, OECD, Reducing Systemic Cybersecurity Risk: cloud computing creates security problems in the form of loss of confidentiality if authentication is not robust and loss of service if internet connectivity is unavailable or the supplier is in financial difficulties ...
• 10 February 2011, ENISA, Security & Resilience in Governmental Clouds: [re cloud computing] its adoption should be limited to non-sensitive or non-critical applications and in the context of a defined strategy for cloud adoption which should include a clear exit strategy ...
(ENISA is the EU's Network and Information Security Agency)
After a while, the penny drops for you, doesn't it. But it hasn't for Whitehall.
B
Small arms fire:
• 4 May 2012 Sage thrusts small biz tool into Microsoft Azure: At the end of last year Sage had converted just 1,000 of its customers from cloud sceptics to adopters, out of an installed base of 6.3 million ...

• 9 May 2012 Cloud data fiasco forces bosses to break out the whiteboards: Workers relying on Atlassian's cloudy team-tracking software have reverted to whiteboards and spreadsheets after a service outage made key project data vanish ...
• 10 May 2012 Root canal surgery officially more desirable than cloud migration: Some IT decision makers would prefer to undergo root canal surgery than deal with migrating their business to a private or public cloud ...

• 15 May 2012 iCloud blows away 15 million users for 90 minutes: Apple’s iCloud service crashed for ninety minutes on Monday, US time, leaving 12% of users – about 15 million people - possibly “unable to access iCloud mail” ...
After a while, you can't help noticing, can you. Not everyone is a fan.
C
from Whitehall's G-Cloud website:

• 12 March 2012 The Times they are a changing: Cloud Computing offers utility services that are cheaper, better and faster to provision ...
• 23 March 2012 A No Brainer: Cloud computing is: ICT services, or ICT enabled business services supplied on a utility basis ...
• 4 April 2012 Baby Steps: You don’t need to make a big commitment up-front because cloud is based on a utility service model ...
• 1 June 2012 G-Cloud ‘Simple’ Procurement Instructions: ... the aim of G-Cloud is to make it easier for the public sector to access and use utility-based ICT services and easier for suppliers to work with us ...
• 26 July 2012 Guidance on Terms and Conditions: Public Cloud means Utility Computing that is available to individuals, public and private sector organisations. Public Cloud is often non-geographically specific and can be accessed wherever there is an Internet connection ... Private Cloud means a Utility Computing infrastructure exclusively for the use of one organisation or community ...
See also • 10 May 2012 G-Cloud Information Assurance Requirements and Guidance
See also • G-CLOUD SERVICES II FRAMEWORK AGREEMENT
• 18 September 2012 .gov.uk hosting bought through G-Cloud: The purchase also shows that government is ready to embrace low cost utility cloud services ...
After a while, you get the idea, don't you. Cloud computing is a good thing according to Whitehall because it turns IT into a utility, it has all the benefits enjoyed by the utilities.
D
from the Guardian newspaper website:
12 October 2012 British Gas set to raise gas and electricity prices
12 October 2012 British Gas raises green electricity bills
15 October 2012 Scottish Power raises gas and electricity prices
17 October 2012 Obama and Romney take up gas prices and energy policy during second debate
18 October 2012 Energy tariff plans under pressure
18 October 2012 Energy companies to be compelled to offer lowest tariff to customers
18 October 2012 David Cameron's energy team unable to explain price pledge
19 October 2012 Npower price hike highlights complexity of energy tariffs
After a while, you get to wonder, don't you. Are these the benefits we want for IT?
E
from the Guardian newspaper website, 29 September 2008:
Richard Stallman
the prophet of open source
... Richard Stallman, founder of the Free Software Foundation and creator of the computer operating system GNU, said that cloud computing was simply a trap aimed at forcing more people to buy into locked, proprietary systems that would cost them more and more over time.

"It's stupidity. It's worse than stupidity: it's a marketing hype campaign," he told The Guardian.

"Somebody is saying this is inevitable – and whenever you hear somebody saying that, it's very likely to be a set of businesses campaigning to make it true."
[A cloud computing user says] We went ahead and moved our business to public cloud computing about 18 months ago. It has been a nightmare, there have been times when the company is down because our collaboration software, Basecamp, is unreachable. We also have an Amazon cloud solution. How secure is this, what if there is a breach? How do you even call Amazon, they don't even have a phone number for us? The level of transparency is not there.
... tough issues remain. One is that organisations often cannot perform audits to verify the vendor's claims. Google, for example, does not allow it. "It does more to impede the security, letting everybody in to take a look at everything," [Eran Feigenbaum, director of security, Google Apps] says.
Larry Ellison, Oracle
"The interesting thing about cloud computing is that we've redefined cloud computing to include everything that we already do," [Mr Ellison] said. "The computer industry is the only industry that is more fashion-driven than women's fashion. Maybe I'm an idiot, but I have no idea what anyone is talking about. What is it? It's complete gibberish. It's insane. When is this idiocy going to stop?"
No doubt someone will point out that Oracle now do offer cloud computing services. Does that imply that Mr Ellison no longer discerns gibberish, idiocy and insanity in cloud computing? Not necessarily. It may be simply that, having warned everyone about the idiocy, insanity and gibberish, he now feels that it is not in his shareholders' best interests to stand by and watch while Oracle's competitors pick all the low-hanging fruit.
After a while, you give up, don't you. Like Whitehall. They've opened an on-line shop, the CloudStore, in which central and local government can buy cloud services (with no warranty*, incidentally). It's a leak, through which control over public sector IT escapes. Whitehall will soon enjoy all the control over their IT suppliers that you personally currently enjoy over your gas, electricity, telephone, water and sewerage suppliers.
----------

* Five questions were submitted to Whitehall's G-Cloud team about the advisability of including the products of Skyscape Cloud Services Ltd on the CloudStore. Skyscape is a small start-up with no trading history into whose care your tax data is being entrusted and your benefits data.

As she always does – and this is as good a point as any to thank her and to emphasise that it is appreciated – Eleanor Stewart, Assistant Director of G-Cloud, answered as fully as she could as follows.

It's up to the customer – whether HMRC, GDS, or any other public sector body – to decide if the supplier meets their requirements, the G-Cloud team give no warranty, inclusion on the CloudStore doesn't imply reliability.

The use of bold below doesn't match Ms Stewart's original reply:
To ensure the financial stability and repute of a company applying to be part of the Cloudstore the Government Procurement Service use a range a tests. The main one is the Experian Score for the company. This is an independent assessment of the financial risk of the company rated from 0-100 and recognised across all sectors. The normal benchmark set by HMG for a supplier is to have a score of 51 however as you have implied this penalises small or young companies and G-Cloud programme as set a requirement to have a score of 25 on the basis that we have a range of services, are broadening the marketplace and are not just for big companies with high scores. To gain a score of 25 you must be a stable company however, as with everything on the G-Cloud framework the customer can determine whether they are happy with any associated risk at the point of selection ...

To purchase from G-Cloud GDS and HMRC have gone through a detailed selection process looking their requirements and the options available to them and have concluded that the Skyscape services will best met their needs and that of UK citizens.

Cloud computing turns IT into a utility, and that's a good thing?

The interesting thing about cloud computing
is that we've redefined cloud computing
to include everything that we already do...
The computer industry is the only industry
that is more fashion-driven than women's fashion.
Maybe I'm an idiot,
but I have no idea what anyone is talking about.
What is it?
It's complete gibberish.
It's insane.
When is this idiocy going to stop?

Cloud computing is cheaper, better, faster, easier, ... because it turns IT into a utility. In fact it's a no-brainer. So says Whitehall's G-Cloud team, reading from the industry hymn-sheet.

DMossEsq doesn't think that emulating the utilities markets is obviously a very good idea. Neither does Richard Stallman. And as for Larry Ellison, all $41 billion-worth of him, he thinks cloud computing announcements are "fashion-driven" and "complete gibberish", see above. And below.

But never mind Messrs Stallman and Ellison and DMossEsq, take a look at the past week's utilities news and you decide, what do you think? Is this where you want public money spent? Your money?

Don't bother working on the answer too hard by the way because actually it doesn't matter what you think. HMRC have already contracted with Skyscape Cloud Services Ltd to put your tax data in the cloud and GDS – the Government Digital Service – have already contracted with the same company to put all your benefits data up there in the cloud, too.

Wednesday, 17 October 2012

PRESS RELEASE: GOV.UK/digital by default – 17 questions for Mr Maude

The following press release has been issued:



PRESS RELEASE


To:

Home Office
OIG (re US-VISIT)
IDABC (re OSCIE)
China (re Golden Shield)
Pakistan (re NADRA)
FBI (re NGI)
UIDAI (re Aadhaar)
Agencies
GOV.UK/digital by default – 17 questions for Mr Maude
17 October 2012
Francis Maude, Cabinet Office Minister, has announced today that public services are in future to be delivered on-line: "... t
oday marks the start of a new way of delivering public services digitally. GOV.UK is a platform for future digital innovation".



Public services are to become “digital by default”, to use the term popularised by Martha Lane Fox, the Prime Minister’s digital champion, who first proposed the development of GOV.UK.

Digital by default is to be delivered via GOV.UK, a website developed by the Government Digital Service (GDS). The chief executive of GDS is ex-Guardian man Mike Bracken, who is also the senior responsible officer owner for identity assurance, please see below.
17 questions for Mr Maude:
1. “Digital by default” means replacing people with computers. How many public servants will be made redundant and how much money will the taxpayer save?
2. Between eight and ten million adults in the UK have still never used the web. Will they be excluded by default from public services?
3. GOV.UK is to be hosted in the cloud by Skyscape Cloud Services Ltd, a start-up which has not yet submitted any accounts to Companies House, which has no company secretary and only one director, a Mr Jeremy Robin Sanders, who also owns 100% of the £1,000 paid-up share capital in the company. What reason is there to believe that Skyscape are reliable, competent and big enough for this enormous task?
4. Starting from Skyscape’s own website it is easy to work out where its data centre is. ARK Continuity Ltd, the property company that built it, even provide a map how to get there. GOV.UK is an important national asset. How will our data be kept secure?
5. HMRC also, like GDS, intend to store our data with Skyscape. Will the Minister please comment on the professionalism of Whitehall procurement which entrusts national assets to a one-man company the location of whose servers is revealed on the web for all to see including terrorists?
6. Even with the big cloud services companies like Amazon, Google, Microsoft and Apple it is commonly understood that cloud computing entails the customer – in this case GDS and HMRC – losing control of their data. Their data may be stored on any machines anywhere in the world and managed by staff the customer has no control over. Why is Whitehall following the fashion and embracing cloud computing?
7. In connection with cloud computing, Microsoft and Google have warned the British public that under the powers of the USA PATRIOT Act and other legislation the FBI can demand to see any data stored by any US company anywhere in the world. These powers extend to non-US companies which also happen to operate a substantial business in the US, e.g. QinetiQ. Does the Minister wish to join Microsoft and Google in warning the British public that their GOV.UK data can be inspected by the US authorities?
8. Individuals and companies already have a tool for transacting with the government on-line – the Government Gateway – and have done for the past ten years and more. How can throwing away that tried and tested tool and replacing it with GOV.UK be called a saving?
9. The Government Gateway has tried and tested identity assurance procedures which minimise on-line fraud and error. Individuals and companies have user IDs issued to them by DWP, who operate the gateway. GDS are said to want to throw away that security and use Facebook, Google and Twitter user IDs instead. What reason is there to believe that these social network user IDs are as reliable as the Government Gateway’s?
10. ... and what qualifications do GDS have to make these foreign companies which pay very little UK tax, not to mention Mr Jeremy Robin Sanders, a part of the British Constitution?
11. GDS are also said to want to take advantage of the logon details the public use for on-line banking to help with identity assurance. UK banks tend to have strong security but nevertheless the problem of on-line fraud persists. Given which, what is the benefit of incorporating the banks’ identity assurance procedures into GOV.UK?
12. Operating through the Department for Business Innovation and Skills (BIS), GDS are trying to issue everyone with PDSs, personal data stores. The provisions for PDSs are part of a BIS initiative called midata and statutory powers to mandate PDSs are tucked away in the Enterprise and Regulatory Reform Bill currently going through Parliament. Would the Minister confirm that a PDS is no more than the software equivalent of an ID card and that PDSs are the real vehicle for identity assurance advocated by GDS?
13. On 5 September 2012, GDS, BIS and the Foreign Office hosted an event at which GCHQ explained how badly British companies deal with cybercrime. Why is GDS simultaneously trying to exacerbate the problem by putting all public services on-line?
14. CESG is the information assurance arm of GCHQ and has published recommendations on the requirements for the secure delivery of on-line public services (RSDOPS). Will the Minister please show the public the documentation proving that GOV.UK satisfies RSDOPS?
15. All public services are on-line in Estonia and in 2007 Russia found it easy as a result to bring the country to its knees with a simple distributed denial of service attack. What is to stop the same fate befalling the UK if digital by default succeeds?
16. This is not the first time digital by default has been tried in the UK. Back in 2005 when Tony Blair called for joined up government, Sir Gus O’Donnell and Ian Watmore devised a programme called “transformational government”. That failed principally because the other departments of state wouldn’t co-operate with the Cabinet Office. What is there to make them co-operate this time?
17. Universal Credit (UC) is an important coalition government policy designed to spring the poverty trap and make work pay, for millions of benefits claimants. The biggest risk faced by UC according to Lord Freud, the DWP Minister responsible, is the lack of identity assurance. Control over its own identity assurance was wrested away from DWP by GDS. DWP couldn’t make any progress on the matter as a result, and GDS haven’t made any progress either. It looks as though the needs of real people are being side-lined while a few senior civil servants indulge their fascination with computers. Would the Minister care to comment?
It is timely to pose these questions today, the day on which GOV.UK goes live. Or next Monday 22 October 2012 when GDS are due to make a major announcement about identity assurance. Or the following Friday 26 October 2012 when Whitehall's G-Cloud team (government cloud) also have a major announcement to make.
ARK Continuity Ltd, by the way, boast the Rt Hon The Baroness Manningham-Buller, formerly the Director General of MI5, as a non-Executive Director.

About David Moss
David Moss has worked as an IT consultant since 1981. The past 9 years have been spent campaigning against the Home Office's plans to introduce government ID cards into the UK. It must now be admitted that the Home Office are much better at convincing people that these plans are a bad idea than anyone else, including David Moss.
Press contacts: David Moss, BCSL@blueyonder.co.uk

PRESS RELEASE: GOV.UK/digital by default – 17 questions for Mr Maude

The following press release has been issued:



PRESS RELEASE


To:

Home Office
OIG (re US-VISIT)
IDABC (re OSCIE)
China (re Golden Shield)
Pakistan (re NADRA)
FBI (re NGI)
UIDAI (re Aadhaar)
Agencies
GOV.UK/digital by default – 17 questions for Mr Maude
17 October 2012