Use cloud first
Source: gov.uk (2025-04-01)

Use the cloud first policy by evaluating cloud computing before other options.

To meet point 5 of the Technology Code of Practice (https://www.gov.uk/guidance/the-technology-code-of-practice) (TCoP) and the government’s cloud first policy (https://www.gov.uk/guidance/government-cloud-first-policy), your plans must show you’ve considered using cloud computing before other options.

If you’re going through the spend control process (https://www.gov.uk/service-manual/agile-delivery/spend-controls-check-if-you-need-approval-to-spend-money-on-a-service) you must explain how you’re trying to meet point 5.

Cloud computing

Cloud computing (https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf) is a way of storing and retrieving data and software over the internet without buying your own hardware. The 3 main types of cloud computing service you can use are:
- software-as-a-service (SaaS), which provides applications over the internet
- platform-as-a-service (PaaS), which provides platforms for developing, testing and deploying your applications over the internet
- infrastructure-as-a-service (IaaS), which provides the virtual infrastructure or network you need to host services over the internet
Cloud Service Models

How using the cloud will help you

You can use cloud computing to treat at least compute, network, storage and power as utilities; with further benefits the further up the SaaS model you travel. This means you should expect to:
- spend more time building the services that are important to your users and less time running datacentres
- avoid upfront investments on your infrastructure
- reduce your overall costs by making use of the scalable pricing model
- have greater flexibility to trial new services or make changes, with lower cost and effort
- meet the Greening Government strategy (https://www.gov.uk/government/publications/greening-government-ict-and-digital-services-strategy-2020-2025), and reduce your environmental impact by using cloud facilities with more efficient use of power and server space
- have greater security as the provider will make regular technology upgrades and apply security patches to the layers they are responsible for.
- have better service availability and resilience for all users
- increase access to skilled resources to support your staff
- allow for better continuous improvement planning
Choosing the cloud computing services for your organisation

When you procure or renew services, all government organisations must consider and fully evaluate potential cloud solutions first before you consider any other option.

You can read guidance on migrating to and using cloud in the public sector, to help you choose and use cloud computing services.

To choose the right cloud computing service for your organisation you’ll need to:
- Continually revalidate the cloud hosting strategy (https://www.gov.uk/guidance/creating-and-implementing-a-cloud-hosting-strategy)
- consider your legacy technology (https://www.gov.uk/guidance/managing-legacy-technology)
- assess a hosting business case (https://www.gov.uk/guidance/how-to-assess-a-hosting-business-case)
Migrating to the cloud

When choosing how and what to migrate to public cloud, you must:
- be aware of government policy and guidance on offshoring and data residency (https://www.gov.uk/government/publications/cloud-guide-for-the-public-sector/cloud-guide-for-the-public-sector#offshoring-and-data-residency)
- make sure your chosen cloud solution has the appropriate level of security (https://www.gov.uk/government/publications/cloud-guide-for-the-public-sector/cloud-guide-for-the-public-sector#security)
- choose a multidisciplinary team (https://www.gov.uk/government/publications/cloud-guide-for-the-public-sector/cloud-guide-for-the-public-sector#people-and-skills) of commercial, technical and service delivery
- consider the amount of vendor lock-in and how to manage technical lock-in in the cloud (https://www.gov.uk/guidance/managing-technical-lock-in-in-the-cloud) you’re willing to accept
- make sure your staff have and continue to have suitable training to implement and use cloud computing
Next: Technology Code of Practice point 6 - Make things secure (https://www.gov.uk/guidance/make-things-secure)

Related guides
- Government technology standards and guidance (https://www.gov.uk/guidance/government-technology-standards-and-guidance)
- Cloud guide for the public sector (https://www.gov.uk/government/publications/cloud-guide-for-the-public-sector)
- Assessing a hosting business case (https://www.gov.uk/guidance/how-to-assess-a-hosting-business-case)
- Deciding how to host your service (https://www.gov.uk/service-manual/technology/deciding-how-to-host-your-service)
- NCSC cloud security principles (https://www.ncsc.gov.uk/collection/cloud-security/implementing-the-cloud-security-principles)
- Crown Hosting (https://www.gov.uk/guidance/the-crown-hosting-data-centres-framework-on-the-digital-marketplace)
- Public sector use of the public cloud (https://www.gov.uk/guidance/public-sector-use-of-the-public-cloud)
- Cloud security guidance (https://www.ncsc.gov.uk/collection/cloud-security)