Tuesday 13 November 2012

Cloud computing, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider cloud computing for example.

The Executive summary of the Government Digital Strategy tells us that:
Government is improving the way it provides information by moving to a single website, GOV.UK. Transactional services now present the biggest opportunity to save people time and save the government money [the writers mean "save the people money", the government doesn't have any money, only the people do].
GOV.UK is the implementation of Martha Lane Fox's dream, a single government domain, one website, on which all government information is to be published, and on which we will all communicate with the government via "transactional services".

Every central government website is in the process of being re-written and subsumed in GOV.UK. No more HMRC.gov.uk, no more Education.gov.uk, etc ... One day there will just be GOV.UK. Why? What's the point of all this energetic and agreeable re-writing of what has already been written? The answer has never been made clear.

How many government transactions will GOV.UK need to carry out every year? According to the Government Digital Strategy:
There is a huge volume of transactions with government. There were around 1 billion individual transactions a year with central government departments in 2011/12. This number rises to nearer 1.5 billion when other governmental organisations such as local government are taken into account ...
Clearly GOV.UK is intended to be a remarkably important national asset. It will act as the gateway or hub through which personal and corporate tax returns are made, passports are applied for, the electoral roll is maintained, benefits are paid, student loans are granted, vehicle excise duty is paid, licences are applied for, and so on – 1½ billion transactions a year.

Further on in the Government Digital Strategy we find:
Principle: Broaden the range of those tendering to supply digital services including more small and medium sized enterprises
and
The ICT Strategy stressed the need for government to procure its technical infrastructure - its servers, internet hosting, etc - as commodity services. The CloudStore framework is an example of this shift, with over 300 suppliers offering cloud-based solutions on a pay-as-you-use basis, with a maximum 12 months contract. The learning from the development of the CloudStore framework will be fed into other digital procurement and commissioning reform.
So-called "cloud computing" is being championed by Whitehall's G-Cloud team (government cloud) and they have provided an on-line shop, the CloudStore, making it easy for central and local government to buy IT services. It's just like using Amazon. There's even a little supermarket trolley to fill up.

GDS have elected to host GOV.UK in the cloud. And elected to do so, with a company called Skyscape Cloud Services Ltd whose wares are for sale on CloudStore.

Skyscape is a startup so young that it has yet to file any accounts with Companies House. It has filed an Annual Return, though, according to which Skyscape has no company secretary and only one director, a Mr Jeremy Robin Sanders, who is also the only shareholder in the company, holding all £1,000-worth of ordinary shares issued and fully paid-up.

GDS have decided to entrust an important national asset and 1½ billion transactions a year to Mr Sanders, a decision described in an open letter as "dangerous, imprudent, ill-advised, unprofessional, wrong-headed, unbusinesslike, undignified and irresponsible". No response has been received from GDS.

HMRC also have contracted with Skyscape, to store all the data currently held at their hundreds of local offices around the country – presumably all our personal and corporate tax returns and correspondence. In future, Mr Sanders will be responsible for the lot.

HMRC are a sensible lot, you may say to yourself, so perhaps GDS's GOV.UK hosting decision isn't so dangerous, imprudent, ill-advised, unprofessional, wrong-headed, unbusinesslike, undignified and irresponsible, after all? Maybe. Or are HMRC being dangerous, imprudent, ill-advised, unprofessional, wrong-headed, unbusinesslike, undignified and irresponsible, too?

The matter was taken up with HMRC. And they responded. They say that:
The G-Cloud was created by the Cabinet Office and the Government Procurement Services (GPS) ... In order to deliver services through G-Cloud, all suppliers on the Framework, Skyscape included, were required to meet a set of mandatory criteria set out by GPS including their financial standing and Experian risk assessments. Additionally, HMRC carried out its own standard taxation and financial compliance checks  before awarding the contract and Skyscape passed the standard set by the G-Cloud Framework and HMRC.
To which, all one can say is that there must be something wrong with the Cabinet Office, GPS and HMRC procurement criteria if they determine that it is safe to store all our records with a one-man startup with no track record.

The Skyscape contracts are subject to review by CESG, the information assurance arm of GCHQ. There is that one hurdle still to jump. Given that Skyscape's landlord advertises the address of the Skyscape data centre on its website and even provides a map how to get there, it's hard to see how Skyscape can pass CESG's security tests.

If CESG veto Skyscape, well and good. If not, that's another organisation to add to the dangerous, imprudent, ill-advised, unprofessional, wrong-headed, unbusinesslike, undignified and irresponsible list.

Suppose that the GDS and HMRC contracts weren't with Skyscape but with a bigger company – would that make them better?

No.

For several reasons.

The biggest supplier of cloud computing services in the world is Amazon. Reason #1, you will have noted Amazon's appearance in front of the Public Accounts Committee yesterday:
Andrew Cecil, head of public policy at Amazon, was lambasted by Mrs Hodge for avoiding the Committee’s questions. She said she would “summon” Amazon’s most senior executives as a matter of priority to make up for Mr Cecil’s “unacceptable nonsence.”
Amazon are in the dock, along with Google and Starbucks, for tax avoidance and one member of the Committee, Charlie Elphicke, was moved to suggest that:
The tax abuse can be stopped. We can tighten UK tax presence rules, we can stop the 'expenses' used to cut business tax bills in the UK and we should refuse Government contracts for companies that don't pay a fair share of tax in the UK.
We the public all have to pay our taxes, so should Amazon and Google and all of GDS's friends and Starbucks. If moral indignation gets us nowhere, perhaps a ban on government contracts would do the trick.

Reason #2, cloud computing is normally described as being like a utility, you only pay for the services you use, you don't have to pay for any overhead. It's a "no-brainer", as GDS put it.

It certainly is. No brains at all. Someone must be paying for the overhead. Whether Amazon or Skyscape. And they're going to pass the cost on to their customers. Whether HMRC or GDS – ultimately, us.

We've just had a month of daily news about how expensive our utilities are, gas and electricity, about how there's nothing even the prime Minister can do about it and, just yesterday, there was an allegation of utility price-fixing à la LIBOR. The utility model is not an attractive one. Which may be why GDS have taken to describing cloud computing as "commodity services" rather than the previously more conventional "utility services".

Reason #3, "cloud computing" means losing control. You don't own the computers. You don't own the buildings. You don't vet or train or manage the staff. The staff can be anywhere in the world, as can the computers, and your data with them, beyond your control, beyond the reach of English law. Ask the G-Cloud team about that, and they haven't got any answer. They're just following the latest fashion.

GDS have a weaselly argument that Whitehall is no different, they don't have to have secure data centres staffed by their own people, they can be just like all the other organisations in the world – and they use cloud computing. It sounds modest, doesn't it, and realistic.

But it's utterly mendacious. Some organisations do use cloud computing, some don't.

Ask a lawyer. Ask a lawyer about the legal problems. The data protection issues. The jurisdiction problems. The compliance problems. The commercial problems – what do you do if your supplier goes bust or is taken over by Huawei? Most of all, though, ask your lawyer if his or her firm uses cloud computing. Lawyers have to keep their clients' data under control and confidential. They can't do that if they haven't got a clue where in the world the data is or who's taking what backups. They'd go out of business the day after signing up with a cloud computing services supplier.

Whitehall also has a duty to keep control of our data and to keep it confidential. Cloud computing is an abrogation of that duty.

Reason #4, what does Larry Ellison, the President of Oracle, all $41 billion of him, have to say about cloud computing?
Maybe I'm an idiot, but I have no idea what anyone is talking about. What is it? It's complete gibberish. It's insane. When is this idiocy going to stop?
What do you know that Larry Ellison doesn't?

Where there should be answers to these questions in the Government Digital Strategy there are just holes. Revolution is proposed with no justification. And yet Sir Bob, the head of the home civil service, welcomes this fantasy.

Cloud computing, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider cloud computing for example.

The UK's identity providers

DWP press release:

13 November 2012 – Providers announced for online identity scheme

The Post Office, Cassidian, Digidentity, Experian, Ingeus, Mydex, and Verizon are the successful providers chosen to design and deliver a secure online identity registration service for the Department for Work and Pensions.
The identity registration service will enable benefit claimants to choose who will validate their identity by automatically checking their authenticity with the provider before processing online benefit claims.
The Minister for Welfare Reform Lord Freud said:
"We are working with cyber security experts to ensure we are clear about the threats to the online process and we are confident that the providers announced today will offer an effective, safe and free to use identity service for future online benefit claims."
As well as offering a safe and secure system, providers will be required to offer a simplified registration process, minimise the number of usernames and passwords a customer will need to remember and reduce the costs incurred across Government for the management of Identity Assurance.
The online Identity Assurance model will be incorporated into Universal Credit as it’s developed and rolled-out. Over time Identity Assurance will become available to all UK citizens who need to access online public services.

Notes to Editors:

  1. On 28 February 2012, the DWP issued an Official Journal European (OJEU) advertisement to provide identity assurance services for Universal Credit customers.
  2. In May 2012 DWP issued an invitation to tender to 44 suppliers.
  3. The value of the 18-month framework contracts is £25m.
  4. The Identity Assurance programme is a Government-wide initiative led by the Cabinet Office which will in time be available to all UK citizens who need to access online public services.
  5. Universal Credit will be the first programme to use the cross-government Identity Assurance solution.
  6. Universal Credit, which will go live nationally in October 2013, replaces the current complicated paper based benefits payment system we have now with a new online application that meets the needs of claimants and employers in today’s digital world.
  7. One further provider is expected to sign up in the next few weeks – completing the eight chosen to design and deliver a secure online IDA service for Universal Credit.
Media enquiries: 0203 267 5125
Out of hours: 07659 108 883
Website: www.dwp.gov.uk
Follow us on Twitter: www.twitter.com/dwppressoffice

The UK's identity providers

DWP press release:

13 November 2012 – Providers announced for online identity scheme

The Post Office, Cassidian, Digidentity, Experian, Ingeus, Mydex, and Verizon are the successful providers chosen to design and deliver a secure online identity registration service for the Department for Work and Pensions.
The identity registration service will enable benefit claimants to choose who will validate their identity by automatically checking their authenticity with the provider before processing online benefit claims.
The Minister for Welfare Reform Lord Freud said:
"We are working with cyber security experts to ensure we are clear about the threats to the online process and we are confident that the providers announced today will offer an effective, safe and free to use identity service for future online benefit claims."
As well as offering a safe and secure system, providers will be required to offer a simplified registration process, minimise the number of usernames and passwords a customer will need to remember and reduce the costs incurred across Government for the management of Identity Assurance.
The online Identity Assurance model will be incorporated into Universal Credit as it’s developed and rolled-out. Over time Identity Assurance will become available to all UK citizens who need to access online public services.

Notes to Editors:

  1. On 28 February 2012, the DWP issued an Official Journal European (OJEU) advertisement to provide identity assurance services for Universal Credit customers.
  2. In May 2012 DWP issued an invitation to tender to 44 suppliers.
  3. The value of the 18-month framework contracts is £25m.
  4. The Identity Assurance programme is a Government-wide initiative led by the Cabinet Office which will in time be available to all UK citizens who need to access online public services.
  5. Universal Credit will be the first programme to use the cross-government Identity Assurance solution.
  6. Universal Credit, which will go live nationally in October 2013, replaces the current complicated paper based benefits payment system we have now with a new online application that meets the needs of claimants and employers in today’s digital world.
  7. One further provider is expected to sign up in the next few weeks – completing the eight chosen to design and deliver a secure online IDA service for Universal Credit.
Media enquiries: 0203 267 5125
Out of hours: 07659 108 883
Website: www.dwp.gov.uk
Follow us on Twitter: www.twitter.com/dwppressoffice

Cybersecurity, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider cybersecurity for example.

Iain Lobban, the Director of GCHQ, writing in the Foreword to 10 steps to cyber security says:
Every day, all around the world, thousands of IT systems are compromised. Some are attacked purely for the kudos of doing so, others for political motives, but most commonly they are attacked to steal money or commercial secrets. Are you confident that your cyber security governance regime minimises the risks of this happening to your business? My experience suggests that in practice, few companies have got this right.
Mr Lobban's advice on cybersecurity was pressed on FTSE 100 companies at a 5 September 2012 event organised by the Department for Business, Innovation and Skills (BIS), the Foreign Office, the Cabinet Office, the Home Office and senior figures from the intelligence agencies, please see Business leaders urged to step up response to cyber threats.

It's hardly news. The newspapers are full of cybersecurity stories and have been for years – there's an incomplete digest in With their head in the clouds:
...
29 March 2009: Spy chiefs fear Chinese cyber attack
8 March 2010: Cyberwar declared as China hunts for the West’s intelligence secrets
10 October 2010: Worm cripples Iran nuclear plant
13 October 2010: UK infrastructure faces cyber threat, says GCHQ chief
4 November 2010: Europe attacks itself in cyber-warfare test – As OECD admits major security fail
8 November 2010: Royal Navy website infiltrated by computer hacker
18 November 2010: China 'hijacks' 15 per cent of world's internet traffic
9 November 2010: US embassy cables: The background
9 December 2010: Hackers hit Mastercard and Visa over Wikileaks row
13 December 2010: Gawker falls victim to hackers
13 December 2010: WikiLeaks: government websites could be hacked in revenge attacks
20 December 2010: Hackers leak e-mail account details of government and defence staff
20 December 2010: English Defence League donor details 'stolen' after database hacked
29 December 2010: Gawker was hacked six months ago, say sources close to Gnosis
9 January 2011: Army adds cyberattack to arsenal
14 January 2011: Reducing Systemic Cybersecurity Risk
17 January 2011: Security & Resilience in Governmental Clouds
20 January 2011: Carbon trade cyber-theft hits €30m
21 January 2011: Lush hackers cash in on stolen cards
26 January 2011: Facebook's Mark Zuckerberg 'attacked by hackers'
31 January 2011: British and US stock exchanges fend off cyber raids
4 April 2011: Epsilon email hack: millions of customers' details stolen
26 April 2011: PlayStation Network hackers access data of 77 million users
3 May 2011: Sony says 25m more users hit in second cyber attack
26 May 2011: China admits training cyberwarfare elite unit
29 May 2011: Lockheed Martin computers under 'significant attack'
31 May 2011: Cyber weapons 'now integral part of Britain's armoury'
1 June 2011: Google phishing: Chinese Gmail attack raises cyberwar tensions
12 June 2011: IMF hit by cyber attack from unknown nation state
16 June 2011: LulzSec hackers claim breach of CIA website
12 July 2011: Hackers steal 90,000 email addresses in cyber attack on US military contractor Booz Allen Hamilton
15 July 2011: US forced to redesign secret weapon after cyber breach
15 July 2011: Pentagon reveals 24,000 files stolen in cyber-attack
25 July 2011: Anonymous hacks Italy's critical-national-IT protection
1 August 2011: LulzSec hacking: teenager ‘had cache of 750,000 passwords’
1 October 2011: Flaw in software puts online savers at risk
19 October 2011: Stuxnet-based cyber espionage virus targets European firms
27 October 2011: Chinese hackers suspected of interfering with US satellites
20 November 2011: Cyber-attack claims at US water facility
24 December 2011: Hidden Dragon: The Chinese cyber menace
25 December 2011: Hackers 'steal US data in Christmas-inspired assault'
8 January 2012: Hackers expose defence and intelligence officials in US and UK
16 January 2012: Israel hit by cyber-attacks on stock exchange, airline and banks
3 February 2012: Anonymous spies on FBI / UK Police hacking investigation conference call
7 March 2012: LulzSec leader Sabu was working for us, says FBI
11 March 2012: Chinese steal jet secrets from BAE
27 March 2012: NSA Chief: China Behind RSA Attacks
31 March 2012: Hackers steal details of millions of credit cards
23 April 2012: Iranian oil ministry hit by cyber-attack
3 May 2012: Attack takes Soca crime agency website down
3 May 2012: Hackers have breached top secret MoD systems, cyber-security chief admits
1 June 2012: US role in cyber attack on Iran nuclear plant revealed
7 June 2012: LinkedIn passwords leaked by hackers
5 August 2012: Iranian state goes offline to dodge cyber-attacks
21 September 2012: Chinese hacktivists launch cyber attack on Japan
...
You get the idea. The web is a dangerous place to do business. Dangerous for individuals, companies and governments.

But do GDS get the idea? Do they listen to GCHQ? Do they read the newspapers? Read the GDS blog, and you get the impression that digital-by-default is a warm, safe, cosy tea party. In reality, all the magnificent power and convenience of the web is at the disposal of criminals and spies and cyberterrorists to wreak havoc. It's a double-edged sword, the web.

You may notice that the only solution to the problem that Iran can come up with, after long and painful experience of cyber attack, is to secede from the worldwide web altogether and try to create an Iranwide web.

Meanwhile, with no such experience, GDS blithely recommend that all public services should be delivered over the web. They are luring the public into a war zone. Irresponsible? Malign? Or just gullible? But who is more gullible? GDS, or us proles?

What do GDS have to offer by way of defence? The Government Digital Strategy says:
Legality, security and resilience
Transactional services will be redesigned to:
• be robustly protective of the security of sensitive user information
• maintain the privacy and security of all personal information
• be resilient, to ensure continuity of service to users and departments
And that's it. No strategy. Just a wishlist. No defence.

Where there should be answers to these questions in the Government Digital Strategy there are just holes. Revolution is proposed with no justification. And yet Sir Bob, the head of the home civil service, welcomes this fantasy.

Cybersecurity, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider cybersecurity for example.

Monday 12 November 2012

Whitehall governance, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider the governance of Whitehall for example.

In 1952 Professor GW Keeton published his book The Passing of Parliament. Keeton was Dean of the Faculty of Laws at University College, London, and according to him:
The relentless growth in size and functions of the Department of State and the relatively high level in calibre of those who staff them, coupled with the steady decline in importance of and function of MPs, has led to a gradual transfer of power and influence from the floor of the House of Commons to the private rooms of permanent civil servants.
60 years later, there are still Whitehall outsiders who believe that politicians make policy. Mainly political journalists, deeply conservative people with a love of tradition and an antique belief in the supremacy of parliament. No-one else believes it.

A few outsiders, unpleasant cynics, the awkward squad, are convinced that policy is made by the European Commission or big business or the trades unions or the US military or the Church of England. But the nice outsiders, the majority, have caught up with Keeton and Yes Minister and for them, policy is made by Sir/Dame Humphreys with a First in Greats.

Apparently the nice outsiders are wrong. Apparently the tail is wagging the dog and policy is made by GDS website designers, who also control the purse-strings and to whom the rest of Whitehall defers.

Back in October 2010 Martha Lane Fox wrote:
[GDS] should own the citizen experience of digital public services and be tasked with driving a 'service culture' across government which could, for example, challenge any policy and practice that undermines good service design ...

It seems to me that the time is now to use the Internet to shift the lead in the design of services from the policy and legal teams to the end users ...

[GDS] SWAT teams ... should be given a remit to support and challenge departments and agencies ... We must give these SWAT teams the necessary support to challenge any policy and legal barriers which stop services being designed around user needs ...

I recommend that all digital teams in the Cabinet Office - including Digital Delivery, Digital Engagement and [GDS] - are brought together under a new CEO for Digital.

This person should have the controls and powers to gain absolute authority over the user experience across all government online services ... and the power to direct all government online spend.

The CEO for Digital should also have the controls and powers to direct set and enforce standards across government departments ...
Last week's Government Digital Strategy says:
Cabinet Office will help departments to recruit suitably skilled individuals. Newly appointed Service Managers will be supported by Cabinet Office through a specialist training programme run by the Government Digital Service. This will include the hands-on process of designing and prototyping a digital service ...

Government digital services are inconsistent and often do not meet the standards that users expect. To ensure that users receive a consistently high-quality digital experience from government, Cabinet Office will develop a service standard for all digital services. No new or redesigned service will go live unless they meet this standard ...

Cabinet Office will lead in the definition and delivery of a range of common cross-government technology platforms, in consultation with departments to ensure they meet business needs. These will underpin the new generation of digital services. Departments will be expected to use these for new and redesigned services, unless a specific case for exemption is agreed ...

The guidance and tools supporting the [digital by default] standard will help service owners to design trusted, cost-effective government services that are embraced by users and meet their needs first time. Government Digital Service will ensure there is a common understanding across government of what outcomes are required to meet the standard. This understanding must be shared by everyone involved in the development and life of a new or redesigned digital service ...

A new Digital Leaders Network was established in early 2012 to drive forward the digital agenda across government. The network is run by the Government Digital Service ...
Who, in GDS, as a matter of interest, is responsible for the nation's education policy? Or transport policy? What rank do GDS-trained "Digital Leaders" enjoy at the MoD?

Will we soon see GDS SWAT teams patrolling the Ministry of Justice and terrorising its denizens into standardisation? Will HM Treasury ring ex-Guardian man Mike Bracken and ask permission every time they want to spend a bob or two? Will the Department of Health really trust GDS to recruit staff for them? (No.) Will HMRC really hold up a web enhancement to their tax-farming implements because GDS tell them to?

The Home Office have a ruinously expensive contract with CSC to develop and maintain the nation's passport application website. What is GDS's locus there? How can they intervene? They don't have the contract – CSC do.

Suppose that GDS actually had all the power suggested by Martha Lane Fox and the Government Digital Strategy. Are they ready to accept the responsibility that comes with it? There are three references to accountability in the strategy document. But what do they amount to? Will anyone be fined? Or demoted? Or fired? Or is "accountability" just a word?

Whitehall departments were meant to co-operate with the Home Office on the ID cards scheme. They said they would co-operate. But according to BBC Radio 4's File on 4 programme on the subject, July/August 2007, when it came to it, either the departments sent someone too junior to the meetings or they sent no-one at all.

"Silo government" they call it in the BBC programme, and something similar put paid to the Cabinet Office's 2005 Transformational Government plan. Co-operation evaporated. GDS's digital-by-default agenda is Transformational Government MK 2 and the same outcome must be expected – co-operation will evaporate.

To us outsiders, Whitehall looks like a set of independent, powerful satrapies with no emperor in control in the centre. The engaging Sir Richard Mottram effectively said as much in his review of the handover from Sir-Gus-now-Lord O'Donnell to the new dispensation.

The repeated attempt to take control of the satraps has always failed, Sir Richard suggests. What reason is there to believe that the time has come now for the empire of the website designer?

Where there should be answers to these questions in the Government Digital Strategy there are just holes. Revolution is proposed with no justification. And yet Sir Bob, the head of the home civil service, welcomes this fantasy.

Whitehall governance, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider the governance of Whitehall for example.

The law, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider the law for example.

Back in October 2010 Martha Lane Fox wrote:
It seems to me that the time is now to use the Internet to shift the lead in the design of services from the policy and legal teams to the end users ...

[GDS] SWAT teams ... should be given a remit to support and challenge departments and agencies ... We must give these SWAT teams the necessary support to challenge any policy and legal barriers which stop services being designed around user needs ...
Last week's Government Digital Strategy says:
Government Digital Service will:

• offer specialist digital expertise to interpret existing legislation

In a few areas, laws made before the digital age can severely constrain the development of simple, convenient digital services. For example, HMRC have to provide tax coding notifications on paper rather than by electronic channels. Cabinet Office will work with departments to identify these potential barriers and ways to remove them ...
M'learned friends may have a few questions. By what Constitutional power will GDS overturn established law? What do GDS know about the law? What qualifications do they have, if any? What vainglorious delusions of grandeur make GDS imagine that it's their job?

Providing "tax coding notifications on paper" is one matter. The Electoral Registration and Administration Bill is another.

Under the provisions of that Bill, it is proposed that the electoral roll should be made more complete and more accurate by cross-referencing it with HMRC, DWP and Department for Education databases.

There is no knowing whether cross-referencing would help.

Whether or not it would help, according to the associated impact assessment (p.2), cross-referencing is illegal:
Key assumptions/sensitivities/risks: Data matching – national rollout would require primary legislation.
The Bill makes the illegal cross-referencing of local and central government databases a matter of identity assurance:
52. In time other forms of verification may become available which means that a person may not be required to produce their NINO [National Insurance number] and DOB [date of birth/birth certificate?] when making a new application to register – the legislation has been drafted with this in mind. On 18 May 2011 the Government announced plans for the development of a consistent, customer-centric approach to digital identity assurance across all public services.
Ex-Guardian man Mike Bracken is not only the chief executive of GDS but also the senior responsible officer owner of the identity assurance programme. No-one knows why. Does he know any more about identity assurance than he does about the law?

Will GDS simply declare that cross-referencing is legal? What is this "specialist digital expertise" that allows GDS to "interpret existing legislation"? Are we supposed to allow GDS to decide the matter? Is that wise?

Let's take a step back and try to get some perspective.

In his book The Socialist Case Douglas Jay wrote:
Housewives as a whole cannot be trusted to buy all the right things, where nutrition and health are concerned. This is really no more than an extension of the principle according to which the housewife herself would not trust a child of four to select the week's purchases. For in the case of nutrition and health just as in education, the gentlemen of Whitehall really do know better what is good for the people than the people know themselves.
That was in 1937, 75 years ago, and things have changed since then – no civilised man today believes that women are inferior and no four year-old can still subscribe to Lord Jay’s Doctrine of the Infallibility of Whitehall.

In 1952 Professor GW Keeton published his book The Passing of Parliament. Keeton was Dean of the Faculty of Laws at University College, London. He debunks The Socialist Case and points to the danger of the Executive moving beyond the reach of either Parliament or the Common Law:
... Very far from the Common Law replacing administrative tribunals, more and more are being created outside the Common Law year by year, and some of the cases discussed earlier in this book will show how, in spite of obvious willingness, the courts have failed to hold back the onward rush of administrative lawlessness.
That was 60 years ago. Keeton’s question then was, in summary, what was the point of going through all the suffering of the Civil War and of establishing the supremacy of Parliament in the 1689 Bill of Rights if we end up with an Executive behaving for all the world like some latter-day monarch whimsically exercising his or her prerogatives?

The question remains pertinent. In those 60 years Whitehall has continued arrogantly to ignore the interests of the public it is meant to serve while it makes one defective decision after another, inefficient and accountable to no-one.

Did Professor Keeton miss a trick? Will the present state of "administrative lawlessness" be improved by handing the interpretation of existing legislation over to a team of website designers using specialist digital techniques?

Where there should be answers to these questions in the Government Digital Strategy there are just holes. Revolution is proposed with no justification. And yet Sir Bob, the head of the home civil service, welcomes this fantasy.

The law, and GDS's fantasy strategy

For some time now, the Government Digital Service (GDS) have made the meaning of their digital-by-default agenda clear – they want the UK to be like Estonia.

It is thanks to the fact that practically every service in Estonia is delivered over the web that, back in 2007, Russia was able to bring the country to its knees in a matter of days. If GDS succeed with their "modernisation" plans, there will be nothing to stop that happening here in the UK.

GDS are in awe of the financial success and popularity of Apple, Amazon, eBay/PayPal, Google and Facebook. With no experience of government behind them, the over-promoted software engineers at the head of GDS want to bring their heroes' tricks to the delivery of public services in the UK.

Sensible people will see Facebook et al as latter-day Pied Pipers of Hamelin – sensible people, including the tens of thousands of public servants who will be laid off and replaced by GDS's computers when government is, as they say, "transformed".

Many of these organisations are famous for avoiding tax on their UK profits and for using their near-monopolies to tyrannise their suppliers and to milk their customers. But GDS somehow maintain their naïve veneration and on 6 November 2012 they published their Government Digital Strategy.

This fantasy strategy is an elaboration of Martha Lane Fox's ideas, set out in her October 2010 letter to Francis Maude, Directgov 2010 and beyond: revolution not evolution. Ms Lane Fox is the Prime Minister's digital champion, she's a historian, and when she says "revolution" she means it.

Her revolutionary fervour is carried over into last week's GDS strategy, which Sir Bob Kerslake – head of the home civil service, permanent secretary at the Department for Communities and Local Government (DCLG) and previously the chief executive of first the London Borough of Hounslow and then Sheffield City Council – has greeted with a post on GDS's blog, Welcoming the Digital Strategy:
Our reform plan also made a clear commitment to improve the quality of the government’s digital services, and to do this by publishing a Government Digital Strategy setting out how we would support the transformation of digital services [how does publishing a wishlist improve the quality of public services?].

We fulfilled that commitment yesterday with the launch of the Government Digital Strategy, Digital Efficiency Report and Digital Landscape Report and I very much welcome their publication.
But why? Why does Sir Bob "welcome" this emmental cheese of a strategy? It's full of holes. Consider the law for example.