G-Cloud

G-Cloud
Name	G-Cloud
Type	Cloud computing procurement framework
Established	2012
Jurisdiction	United Kingdom
Administered by	Crown Commercial Service

G-Cloud

G-Cloud is a United Kingdom procurement framework for cloud computing intended to streamline acquisition of digital services across public sector bodies. It connects public sector buyers with suppliers offering hosting, software, and platform services, aligning with procurement policies and digital transformation initiatives. The framework interacts with broader UK policy instruments and initiatives such as the Crown Commercial Service, Cabinet Office, Digital Marketplace, National Audit Office, and procurement law regimes including the Public Contracts Regulations 2015.

Overview

The framework facilitates purchases of cloud hosting, software as a service, and platform as a service by public sector organisations such as NHS England, Department for Work and Pensions, HM Revenue and Customs, Ministry of Defence, and local authorities like Manchester City Council and Westminster City Council. Suppliers range from multinational corporations like Amazon Web Services, Microsoft Azure, Google Cloud Platform, IBM, and Oracle Corporation to UK-based firms and small and medium-sized enterprises such as PA Consulting, Sopra Steria, and regional technology consultancies. The framework operates within the legal context of the European Union prior to Brexit and subsequent frameworks influenced by the United Kingdom Parliament and Cabinet Office guidance. Governance interactions include oversight by bodies like the National Cyber Security Centre and audit by the National Audit Office.

History and Development

G-Cloud was launched under the aegis of the Cabinet Office and early digital reformers including figures associated with the Government Digital Service and public sector reform campaigns tied to broader administrative changes after the 2010 United Kingdom general election. Iterations and lot releases have paralleled wider public sector procurement reforms such as the creation of the Crown Commercial Service and policy shifts following reports by the Public Accounts Committee and investigations by the Information Commissioner's Office. International comparisons reference procurement practices in administrations such as the United States General Services Administration, procurement platforms used by the Australian Government, and EU initiatives like the European Commission digital strategy. The framework evolved alongside major events including cyber incidents like the WannaCry ransomware attack which influenced security requirements, and legal changes tied to Brexit following the 2016 United Kingdom European Union membership referendum.

Structure and Framework

The framework is divided into lots covering hosting, software, and support services, and integrates accreditation and assurance schemes such as Cyber Essentials, ISO/IEC 27001, and compliance with standards referenced by the National Cyber Security Centre. Contracts reference the Public Contracts Regulations 2015 and align with procurement guidance from the Crown Commercial Service and policy from the Cabinet Office. Procurement pathways through the framework accommodate public bodies governed by statutes like the Local Government Act 1972 and entities such as BBC-chartered bodies and arm's-length bodies like Health Education England. Supplier onboarding requires due diligence potentially involving the National Crime Agency standards for supply chain checks and engagement with commercial auditors such as the Institute of Chartered Accountants in England and Wales.

Services and Offerings

Offerings on the framework include computing resources and managed services from suppliers ranging from hyperscalers like Amazon Web Services, Microsoft Azure, and Google Cloud Platform to specialist providers such as Rackspace, NTT Communications, and Atos. Software as a service products include collaboration and productivity suites offered by Microsoft 365, Google Workspace, and sector-specific records management platforms used in healthcare settings overseen by bodies like NHS Digital. Platform services include container orchestration and managed databases consistent with technologies from Docker, Inc., Kubernetes, and databases like PostgreSQL and MySQL offered by vendors. Professional and consultancy services come from firms such as Accenture, Deloitte, KPMG, PwC, and boutique firms advising on cloud migration and change management.

Procurement and Compliance

Procurement through the framework follows public procurement principles enforced by bodies like the Competition and Markets Authority and monitored by the National Audit Office and Public Accounts Committee. Contract terms reflect requirements under statutes such as Freedom of Information Act 2000 and data protection obligations governed by the Data Protection Act 2018 and the Information Commissioner's Office. Security and resilience obligations are informed by standards from the National Cyber Security Centre, international norms like ISO/IEC family standards, and incident response expectations shaped by incidents investigated by the Cabinet Office and law enforcement agencies including the National Crime Agency. Supplier performance metrics tie into service-level agreements used by local enterprise partnerships and public bodies like Transport for London.

Impact and Criticism

Proponents argue the framework reduced procurement friction for organisations like NHS England and Ministry of Justice, encouraged supplier diversity including small and medium-sized enterprises, and aligned public sector IT purchasing with digital strategies advocated by the Government Digital Service. Critics, including reports by the National Audit Office and debates in the House of Commons, have raised concerns about concentration among major suppliers such as Amazon Web Services and Microsoft Azure, market distortion issues examined by the Competition and Markets Authority, and compliance gaps highlighted during high-profile incidents like the WannaCry ransomware attack. Academics and commentators associated with institutions such as the London School of Economics and University of Oxford have analysed cost-effectiveness, supplier lock-in, and procurement transparency, while parliamentary inquiries by the Public Accounts Committee and policy reviews by the Cabinet Office continue to influence reforms.

Category:Cloud computing