Monday 1 October 2012

Cloud computing and the Gadarene lemmings of Whitehall

It happens sometimes. You sit down to write a post and find you've already written it. In this case three months ago, HMG's cloud computing strategy – there isn't one.

In brief, Chris Chant identified 23 problems with Government IT and claimed that the solution is cloud computing and agile software engineering methods. He never stated how these remedies would solve the 23 problems and neither has anyone else.

Another way of putting which is to say that there is no Whitehall IT strategy for cloud computing. They can't give any examples of how cloud computing will help. They have no reason for creating CloudStores and contracting with a one-man band to host GOV.UK and HMRC's local office records in the cloud. They're just doing it. Because everyone else is. Allegedly.

Allegedly. The qualification has to be added because DMossEsq asked a very senior partner of a major global firm of lawyers if his firm uses the cloud and, in the politest way, he tried not to look as though he was dealing with a lunatic.

It's a breach of confidence to hand over client documents to a third party, a third party who may be anywhere in the world. The message was that his firm prefers to keep control of its data. It prefers to stay in business. The two are linked.

If Whitehall stick all our records in the cloud, they lose control of them. They lose control of their IT costs (our IT costs), the computers, the location of the computers and the staff who operate them, and they lose control of the data stored and processed on them.

Can anyone remember why Whitehall want cloud computing? Why they don't want to use their own data centres? What the return is meant to be? Why they're taking the risk?

Why are they wasting their time and our money? Why are they so intent on losing control? Is government too difficult for them? Have they given up?

Is there any sense in which Whitehall's behaviour is in the public interest? Any sense in which it's businesslike, professional, responsible, logical or dignified?

No. None.

Whitehall are behaving like a herd of adolescent fashion-driven Gadarene lemmings.

Someone wants to say that Whitehall are wasting our money with impunity and that the state of public administration in the UK is disgraceful. Or has he already said that?

Cloud computing and the Gadarene lemmings of Whitehall

It happens sometimes. You sit down to write a post and find you've already written it. In this case three months ago, HMG's cloud computing strategy – there isn't one.

Sunday 30 September 2012

30 September 2012, a big day – Dame Helen Ghosh and ex-Guardian man Mike Bracken

30 September 2012. It's a big day today. Dame Helen Ghosh's last day as permanent secretary at the Home Office. What will change when she's gone?
    • Will Sarah Rapson, chief executive at the Identity & Passport Service (IPS), be allowed to carry on over-charging us Brits for passports to the tune of £300 million a year?
    • IPS has never recovered from its failure under Sir David Normington and James Hall to implement government-issue ID cards. They suffered something like a corporate nervous breakdown. Isn't it time now at last for a new name and a re-launch?
    • Will Jackie Keane be able to carry on spending money like water on IABS, the Immigration and Asylum Biometric System?
    • Will assistant commissioner Mark Rowley at the National Policing Improvement Agency stop wasting money on mobile fingerprint equipment?
    • Will Rob Whiteman, chief executive of the UK Border Agency (UKBA), be able to maintain the high standards and success rates of that organisation?
    • Will Brian Moore's successor as chief executive of the UK Border Force ditto?
    • Isn't it time now to stop hosing money at CSC and VF Worldwide Holdings for their biometrics-based visa application work abroad?
    • Will IBM be allowed to stop bashing its head against the brick wall that is eBorders?
    • Is Alex Lahood (the Director of Identity Management, no less, at UKBA, please see p.9) still testing biometrics in Croydon? If so, why?
    • Is Marek Rejman-Greene still Senior Biometrics Advisor at the Home Office Scientific Development Branch? Ditto.
    These are just some of the questions for Dame Helen's successor to ponder.

    Today is also the last day for the Government Digital Service (GDS) to announce the approved suppliers of the UK's much-touted Identity Assurance Service (IAS). It really is a big day.
    • Will GDS meet the deadline? (Six hours to go ...)
    • Will they dare appoint Google and Facebook as "identity providers" to the UK?
    • If not, will the NSTIC folk in the US cross them off the Christmas card list?
    • Will Martha Lane Fox ditto?
    • When Universal Credit fails, will DWP get the blame or GDS?
    • Will the Department for Business Innovation and Skills stop pretending to want midata?
    • If ex-Guardian man Mike Bracken (executive director of government digital services and senior responsible officer owner for the identity assurance programme) can't make Estonia come to the UK, will he go there?
    • Will GDS's dream of inserting GOV.UK into our national payment systems come true? If so, how many weeks before we are reduced to a barter economy? Two? Or one?
    • Will GOV.UK replace the Government Gateway?
    • Will GDS's IAS succeed where James Hall's ID cards failed?
    • Can GOV.UK operate successfully on a cloud service operated by Skyscape, the one-man company?
    These are just some of the questions that probably won't be answered tomorrow.

    30 September 2012, a big day – Dame Helen Ghosh and ex-Guardian man Mike Bracken

    30 September 2012. It's a big day today. Dame Helen Ghosh's last day as permanent secretary at the Home Office. What will change when she's gone?

    G-Cloud, GDS, HMRC, Skyscape and the USA PATRIOT Act

    At the Office 365 launch, Gordon Frazer, managing director of Microsoft UK,
    gave the first admission that cloud data
    — regardless of where it is in the world —
    is not protected against the USA PATRIOT Act.

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    ----------  o  O  o  ----------

    G-Cloud
    Whitehall's G-Cloud team have taken the baffling decision to include Skyscape Cloud Services Ltd in its Cloudstore.

    Cloudstore is an on-line shop the team have set up to display the wares of approved suppliers and from which government departments are supposed to be able to buy with confidence.

    That confidence must be limited in the case of Skyscape which has no track record in business, is so young a company that it has yet to file any accounts and has only one director, who is also the only shareholder.

    What are the G-Cloud approval procedures? Is it possible to fail them?

    HMRC
    HMRC have taken the baffling decision to stop storing data in their local offices and store it instead in the cloud with Skyscape. What data? PAYE and NI payments? VAT payments? Personal tax returns? Company tax returns? That's the kind of thing HMRC deal with.

    In the name of efficiency and greenness, HMRC think it is wise to lose control of their data – more properly, our data – and hand it over to a company owned and directed by just one man?

    GDS
    The Government Digital Service (GDS) have taken the baffling decision to host GOV.UK on Skyscape's servers.

    GDS are the people whose job it is to make all public services digital by default.

    They don't have a lot of successes to their name. They're meant to have approved the suppliers of identity assurance services by now. Today's the deadline and they still haven't got round to it. As a result, DWP's Universal Credit scheme, among others, is left twisting in the wind, unable to proceed for lack of the necessary identity assurance.

    But they have produced GOV.UK. It's still in testing, but at least there's something to show for their work. You'd think they'd look after it. But no, they're entrusting its care to a one-man business, Skyscape.

    GOV.UK is only meant to replace every single central government website + Directgov + Businesslink + (this is a guess) the Government Gateway. But what the heck, let's stick it in the cloud, that's the modern way, that's where everything's heading, in a handcart ...

    We're not just talking here about the businesslike behaviour of Whitehall, its responsible attitude and its grasp of reality. We're nibbling at Constitutional questions, including questions of sovereignty.

    Skyscape
    On their website, Skyscape say:
    SOVEREIGNTY

    Skyscape is a UK registered company owned exclusively by UK domiciled shareholders. All our secure operational centers and data centres for UK Public Sector clients are sited within the UK in highly secure IL6 data centres. A significant competitive differentiator is our focus on the integrity of our client’s data, including protection from potential access by overseas legislation including the US Patriot Act.
    Let's sweep up some of the small stuff first:
    • Skyscape only has one shareholder, so what's all this about "UK domiciled shareholders" plural?
    • Are Skyscape promising never to have any non-dom shareholders?
    • Why can't they spell "centres" the same way twice in a single sentence?
    • How secure are their data centres given that their "partner" ARK Continuity publishes a map of how to get to one of them on their website?
    • Is a "focus on the integrity of our client’s data" a "significant competitive differentiator"? Don't other cloud service suppliers focus on exactly the same thing?
    • And what do they mean by "integrity"?
    Now the big one.

    The USA PATRIOT Act 2001
    "USA PATRIOT" is an acronym standing for Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism. The Act was passed in the aftermath of 9/11.

    It's a long document and DMossEsq hasn't read it. Bits of it, but not all of it. Mayer Brown have. Mayer Brown are a US firm of lawyers and in their paper The USA Patriot Act and the Privacy of Data Stored in the Cloud they say:
    European consumers have expressed concern that the USA Patriot Act ... will afford the US government undue and unfettered access to their data if they choose to store it on the cloud servers of US providers (e.g., Microsoft or IBM) ...

    Two ... mechanisms that US law enforcement could use to access data in the cloud that warrant discussion are FISA [Foreign Intelligence Security Act] Orders and National Security Letters [NSLs] ...

    FISA Orders, particularly as expanded under Section 215 of the Patriot Act, have given rise to privacy concerns for several reasons. First, such orders may be granted ex parte, meaning with only the FBI presenting evidence to the court. Second, Section 215 includes a “gag” provision that prohibits the party that receives a FISA Order from disclosing that fact. This typically would prevent a cloud service provider from informing its customers that the service provider had shared their data with the FBI in response to a FISA Order ...

    ... the FBI may issue NSLs on its own initiative, without the authorization of any court. (This was true even before the Patriot Act.) Nothing in the Patriot Act provides for any judicial review of the FBI’s decision to issue an NSL. Second, the NSL statutes impose a gag requirement on persons receiving an NSL. In addition, the Attorney General Guidelines and various information sharing agreements require the FBI to share NSL information with other federal agencies and the US intelligence community ...

    ... any corporation based in the United States will be subject to US jurisdiction and, thus, can be subject to FISA Orders, NSLs, search warrants, or grand jury subpoenas. The same is generally true for a non-US corporation that has a location in the United States or that conducts continuous and systematic business in the United States ...

    ... an entity that is subject to US jurisdiction must produce not only materials located within the United States, but any data or materials it maintains in its branches or offices anywhere in the world. The entity even may be required to produce data stored at a non-US subsidiary ...

    ... US law enforcement authorities may serve FISA Orders, NSLs, warrants or subpoenas on any cloud service provider that is US based, has a US office, or conducts systematic or continuous US business—even if the data is stored outside the United States ...

    ... US law enforcement authorities may serve FISA Orders, NSLs, warrants or subpoenas on any cloud service customer that is US based, has a US branch, or conducts systematic or continuous US business—even if the data is stored outside the United States ...
    You get the message.

    In case you don't, Microsoft say the same thing more briefly, Microsoft admits Patriot Act can access EU-based cloud data:
    At the Office 365 launch, Gordon Frazer, managing director of Microsoft UK, gave the first admission that cloud data — regardless of where it is in the world — is not protected against the USA PATRIOT Act.
    So do Google, Web freedom faces greatest threat ever, warns Google's Sergey Brin:
    Brin acknowledged that some people were anxious about the amount of their data that was now in the reach of US authorities because it sits on Google's servers. He said the company was periodically forced to hand over data and sometimes prevented by legal restrictions from even notifying users that it had done so.
    Microsoft and Google are both themselves suppliers of cloud services. They're being straight with the public.

    Skyscape can tell us till they're blue in the face that its one and only shareholder is domiciled in the UK. But as long as the company is somehow linked up in its mysterious partnership with QinetiQ, Cisco, VMware and EMC the claim to offer "protection from potential access by overseas legislation including the US Patriot Act" is arguably false.

    Whitehall has a duty to keep control of the data we entrust to its custody. Sticking our data in the cloud is a breach of that duty.

    If Whitehall, GDS, HMRC and/or the British public are relying on that claim of Skyscape's, they/we may be sadly mistaken.

    ----------

    Cribsheet
    What? Even QinetiQ? The dear old true blue DERA as was?

    Yes, even QinetiQ, because of its "conduct of a systematic and continuous US business", viz. QinetiQ North America, 7918 Jones Branch Drive, McLean, VA 20165, Tel: 703-652-9595, www.QinetiQ-NA.com, contactus@qinetiq-na.com ...

    Added 10.1.13
    U.S. Spy Law Authorizes Mass Surveillance of European Citizens

    Added 13.2.13
    Yes, U.S. authorities can spy on EU cloud data. Here's how

    Added 16.3.13
    National Security Letters ruled unconstitutional

    G-Cloud, GDS, HMRC, Skyscape and the USA PATRIOT Act

    At the Office 365 launch, Gordon Frazer, managing director of Microsoft UK,
    gave the first admission that cloud data
    — regardless of where it is in the world —
    is not protected against the USA PATRIOT Act.

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    ----------  o  O  o  ----------

    G-Cloud
    Whitehall's G-Cloud team have taken the baffling decision to include Skyscape Cloud Services Ltd in its Cloudstore.

    Cloudstore is an on-line shop the team have set up to display the wares of approved suppliers and from which government departments are supposed to be able to buy with confidence.

    That confidence must be limited in the case of Skyscape which has no track record in business, is so young a company that it has yet to file any accounts and has only one director, who is also the only shareholder.

    What are the G-Cloud approval procedures? Is it possible to fail them?

    Five questions for the G-Cloud team, champions of cloud computing in the 21st century skyscape of UK government

    30 September 2012, posted on the G-Cloud blog here and here. The "Eleanor" addressed here is Eleanor Stewart, the main spokesman for G-Cloud since Ian Watmore and Chris Chant left Whitehall:

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]
    dmossesq says:

    Your comment is awaiting moderation. 

    September 30, 2012 at 7:21 am

    This business about Skyscape, the Cloudstore and GDS is fascinating, Eleanor, thank you. And I note that HMRC also have contracted for cloud services with Skyscape. Just a few questions.

    Skyscape is too young to have filed any accounts yet with Companies House, so we have no idea about its P&L and its balance sheet. On the other hand, we do know from Companies House that Skyscape’s registered office is at Hartham Park, Hartham, Corsham, Wilts SN13 0RP. And that it has a paid up share capital of just £1,000. The company turns out to have just one director, a Mr JR Sanders. And just one shareholder, the same Mr JR Sanders.

    Q1: just how small does a company have to be to fall below the exacting standards for inclusion in the Cloudstore?

    Q2: GDS and HMRC seem to have contracted not so much with one company as with one man. Do you think that’s wise?

    Skyscape claim to be in some sort of an “alliance” with five other companies including ARK Continuity.

    ARK Continuity’s registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP. One of its directors, a Mr JP Thomas, who owns £3.20 of ARK’s £16 issued share capital, used to own one share in Skyscape, but transferred it to Mr JR Sanders on 19 April 2012.

    Q3: just what does this “alliance” amount to?

    ARK is basically a property company and on its website it proudly displays its Spring Park data centre at Hartham Park, Hartham, Corsham, Wilts SN13 0RP. They provide a map of how to get there and helpfully add that the MoD have secure facilities nearby.

    Q4: GOV.UK and HMRC’s Skyscape contracts cover important national assets and if the blabbermouths at ARK have given away their current location could you arrange for them to be moved?

    Obviously you’re busy and this might be too much of an imposition in the case of a traditional data centre. But I understand that with cloud computing you just press a button and the application disappears from one virtual server and effortlessly spins up immediately on another one.

    Q5: Is that correct?
    Substantially the same comment has been posted to the Government Digital Service (GDS) blog here and here.

    Comments will only appear on the G-Cloud and GDS blogs after moderation by them and only if they want the comments to appear.

    Five questions for the G-Cloud team, champions of cloud computing in the 21st century skyscape of UK government

    30 September 2012, posted on the G-Cloud blog here and here. The "Eleanor" addressed here is Eleanor Stewart, the main spokesman for G-Cloud since Ian Watmore and Chris Chant left Whitehall:

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]
    dmossesq says:

    Your comment is awaiting moderation. 

    September 30, 2012 at 7:21 am

    This business about Skyscape, the Cloudstore and GDS is fascinating, Eleanor, thank you. And I note that HMRC also have contracted for cloud services with Skyscape. Just a few questions.

    Skyscape is too young to have filed any accounts yet with Companies House, so we have no idea about its P&L and its balance sheet. On the other hand, we do know from Companies House that Skyscape’s registered office is at Hartham Park, Hartham, Corsham, Wilts SN13 0RP. And that it has a paid up share capital of just £1,000. The company turns out to have just one director, a Mr JR Sanders. And just one shareholder, the same Mr JR Sanders.

    Q1: just how small does a company have to be to fall below the exacting standards for inclusion in the Cloudstore?

    Q2: GDS and HMRC seem to have contracted not so much with one company as with one man. Do you think that’s wise?

    Skyscape claim to be in some sort of an “alliance” with five other companies including ARK Continuity.

    ARK Continuity’s registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP. One of its directors, a Mr JP Thomas, who owns £3.20 of ARK’s £16 issued share capital, used to own one share in Skyscape, but transferred it to Mr JR Sanders on 19 April 2012.

    Q3: just what does this “alliance” amount to?

    ARK is basically a property company and on its website it proudly displays its Spring Park data centre at Hartham Park, Hartham, Corsham, Wilts SN13 0RP. They provide a map of how to get there and helpfully add that the MoD have secure facilities nearby.

    Q4: GOV.UK and HMRC’s Skyscape contracts cover important national assets and if the blabbermouths at ARK have given away their current location could you arrange for them to be moved?

    Obviously you’re busy and this might be too much of an imposition in the case of a traditional data centre. But I understand that with cloud computing you just press a button and the application disappears from one virtual server and effortlessly spins up immediately on another one.

    Q5: Is that correct?
    Substantially the same comment has been posted to the Government Digital Service (GDS) blog here and here.

    Comments will only appear on the G-Cloud and GDS blogs after moderation by them and only if they want the comments to appear.

    G-Cloud, GDS, HMRC and Skyscape, the company with just one director, who owns all the shares – Whitehall SNAFU

    The story so far ...

    The Government Digital Service (GDS) have contracted with Skyscape Cloud Services Ltd to host the new unified central government website, GOV.UK, in the cloud.

    Episode 1, Insanity – are they mad? Skyscape is a £1,000 company. Isn't that a bit small for this monumental responsibility?

    Whitehall's G-Cloud team say this is an example of good practice, using small and medium-sized enterprises (SMEs) instead of the ponderous and expensive big boys.

    Episode 2, Mendacity – are they lying? Skyscape claims to be in alliance with five other companies whose combined turnover is £43.3 billion and who have over 100,000 staff. Isn't that a bit big for an SME?

    Now read on ...

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    Episode 3, Confusion – what's going on?

    HMRC
    Now HMRC have signed up with Skyscape as well as GDS. Phil Pavitt, HMRC's CIO (Chief Information Officer) says that the shift to cloud ...
    ... will save over £1 million a year in running costs and will increase reliability and security of HMRC's internal IT services.

    The Skyscape contract is a major step for HMRC in moving away from traditional ways of working with large service providers. And it's a great example of how we're exploring smarter, more innovative solutions that make life simpler for us and help us provide a better deal for our customers ...
    • Will Mr Pavitt's head roll if the Skyscape contract doesn't "save over £1 million a year in running costs"?
    • Suppose Skyscape put their prices up?
    • Suppose Skyscape go bust – it's only a £1,000 company after all?
    • Suppose Skyscape's servers fall over for a fortnight like the Royal Bank of Scotland's did earlier this summer?
    • Does HMRC have good enough book-keeping systems to know if £1 million has been saved and where and why?
    • HMRC is no SME – its ASPIRE contract with Capgemini and Fujitsu is worth £8 billion over ten years. Is it worth taking the risk of using Skyscape to save one eight-thousandth eight-hundredth of the value of just one contract among many?
    • ...
    We know the answer to one of those questions. The National Audit Office have told us that when HMRC asked their suppliers to be a bit more explicit what they were charging for on their invoices, the suppliers refused. HMRC pay anyway, whatever it is they're paying for.

    God, but Lin Homer's got a lot of work to do.

    Skyscape
    Never mind all those questions for the moment, the point at issue is that Mr Pavitt thinks that Skyscape is a small company.

    How small?

    We already know that it has only £1,000 of paid up share capital. And that the company is too young to have filed any accounts yet, so we have no idea about its P&L and balance sheet. The G-Cloud team have approved Skyscape to sell its wares on HMG's Cloudstore, GDS have bought from them and so have HMRC – how did they satisfy themselves as to Skyscape's commercial health?

    They may not have filed any accounts but Skyscape have filed an annual return, as at 3 May 2012, according to which:
    • The registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP
    • The company has one director – Mr Jeremy Robin Sanders
    • And one shareholder – Mr Jeremy Robin Sanders
    GDS and HMRC haven't signed up with one company so much as with one man. One man owns all the shares and is the only director of the company which hosts the central government website and hosts some of HMRC's data. One man. What's going on?

    GOV.UK depends on one man. Mr Sanders. Bits of HMRC depend on one man. Mr Sanders. The G-Cloud team have approved one man to sell his wares on the Cloudstore. Mr Sanders. The UK is a big, complicated, modern state with 1,000 years of democracy behind it and government contracts affecting the entire population are signed with just one man. Mr Sanders.

    While that's sinking in, en passant, note that Mr Sanders didn't always own all the shares in Skyscape. Mr Jeffery (sic) Paul Thomas used to own one share. Then on 19 April 2012 he transferred it to Mr Sanders. You won't forget that name, will you – Jeffery (sic) Paul Thomas.

    The Skyscape Cloud Alliance
    The following note appears on the Skyscape website ...
    SKYSCAPE CLOUD ALLIANCE

    The Skyscape Cloud Alliance partners; QinetiQ ,VMware, Cisco, EMC, and Ark Continuity bring together an end to end cloud solution which is Skyscape. This Alliance also provides a collaborative resource which drives innovation and our technical product development programme.
    What does it mean?

    If it means that Skyscape is a joint venture company set up by the allies, then Skyscape has the backing of £43.3 billion of annual revenue and 100,000 staff worldwide. Which means that it's not really an SME at all.

    But it doesn't say that. The five companies are called "partners". But Skyscape isn't a partnership, it's a limited company.

    Presumably Skyscape haven't just put these names on their website because it looks good. Because it's handy for marketing. If they used these names without the allies' permission, they'd be sued. There must be some sort of a commercial arrangement between Skyscape, QinetiQ and the others. But what sort of arrangement?

    Skyscape are not mentioned in the accounts of QinetiQ or VMware or any of the allies. The nature of this commercial arrangement is a mystery. A gentlemen's agreement of some sort, perhaps? Surely that's not enough for G-Cloud, GDS and HMRC to rely on.

    ARK Continuity
    ARK Continuity is the odd one out among the Skyscape allies. It's relatively tiny. According to its annual return as at 16 December 2011:
    • The registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP, the same as Skyscape's.
    • It has a company secretary and three directors – two bankers plus Mr Jeffrey (sic) Paul Thomas, possibly the ex-shareholder of Skyscape.
    • It has two classes of 1p ordinary shares, A and B, 800 of each issued, so it has £16 of share capital, not all paid up at the date of the return.
    • Revcap Properties 25 Ltd owns all 800 A ordinaries and Mr Jeffrey (sic) Paul Thomas owns 320 of the B ordinaries.
    According to the 30 April 2011 Ark Continuity annual report and accounts, the two bankers are appointed as directors to represent the interests of Revcap Properties 25 Ltd, the 75% majority shareholder, the ultimate parent company of Revcap Properties 25 Ltd is Real Estate Venture Capital Partners LLP and:
    The principal activity of the company and the group is the design, construction and operation of data centres
    Nearly finally, on 9 August 2012, ARK Continuity appointed Baroness Elizabeth Lydia Manningham-Buller a director. The Rt Hon The Baroness Manningham-Buller was of course, formerly, the Director General of MI5.

    On their website, ARK Continuity are naturally proud of their Spring Park data centre. They're a property company. Of course they're proud.

    That's Spring Park at Hartham Park, Corsham, Wilts SN13 0RP, they provide a map of how to get there and they say that:
    Spring Park affords occupiers the opportunity to embrace best practice and sustainable principles in the design, construction, engineering and operation of their data centres

    Spring Park is one of Europe's premier data centre locations. Strategically positioned and built on a legacy of over 50 years investment in critical national infrastructure, Spring Park comprises 14.79ha of surface land, 9.29ha of underground, access to 114MVA diverse power supply and c93,000m² of consented data centre and office development

    Located one mile from the A4 and 8 miles from J17 of the M4 between Swindon and Bristol, the site is adjacent to secure MoD facilities and benefits from significant connectivity infrastructure

    To see the location map click here
    To watch the History of Spring Park click here
    The early footage of the Romans quarrying stone at Corsham to build the new town of Bath in the green belt is fascinating but someone should tell ARK about security. The Rt Hon The Baroness Manningham-Buller, perhaps?

    The MoD might prefer it if ARK Continuity didn't tell people where their secure facilities are. GDS and HMRC, too.

    And let's hope to God that that's not where GOV.UK is being hosted and where HMRC have stored their records. Because otherwise, now, thanks to ARK Continuity's website, everyone will know.

    G-Cloud, GDS, HMRC and Skyscape, the company with just one director, who owns all the shares – Whitehall SNAFU

    The story so far ...

    The Government Digital Service (GDS) have contracted with Skyscape Cloud Services Ltd to host the new unified central government website, GOV.UK, in the cloud.

    Episode 1, Insanity – are they mad? Skyscape is a £1,000 company. Isn't that a bit small for this monumental responsibility?

    Whitehall's G-Cloud team say this is an example of good practice, using small and medium-sized enterprises (SMEs) instead of the ponderous and expensive big boys.

    Episode 2, Mendacity – are they lying? Skyscape claims to be in alliance with five other companies whose combined turnover is £43.3 billion and who have over 100,000 staff. Isn't that a bit big for an SME?

    Now read on ...

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]