Response to consultation on recommendations on outsourcing to cloud service providers

Go back

Question 1: Are the provisions from these recommendations clear and sufficiently detailed to be used in the context of cloud outsourcing?

The guidance primarily focuses on Infrastructure as-a-Service (“IaaS’) cloud-based services and rarely focuses on other cloud-based services, such as Software as-a-Service (“SaaS”). The distinction between different types of cloud-based service is important because firms should have different considerations depending on the type of service they are procuring.

Question 2: Are there any additional areas which should be covered by these recommendations in order to achieve convergence of practices in the context of cloud outsourcing?

See above. For example, with SaaS offerings, DXC would expect the guidance to address issues such as: (i) updates and maintenance of applications and (ii) service level issues (such as response times for implementing patches). Providing guidance that distinguishes between various types of cloud-based services will help firms to better identify and contract for the service that meets their requirements.

Name of organisation

DXC Technology