The public sector has its unique challenges in terms of change management. Being highly regulated and structured, introducing a new process, technology or cultural change is more challenging and demands a strong change management strategy.

Cloud services are commonly offered as Platform-As-Service (PaS), Software-AsService (SaaS) and Infrastructure-As-Service (IaS). Devising an information security strategy for the cloud requires establishing clear boundaries of responsibilities related to information security and governance for each model.