What the PCDCC is

The PCDCC is an optional government certification. It gives a standardised and consistent assessment of onshore (in New Zealand) Public Cloud Data Centres.

The PCDCC will assess Public Cloud Data Centres against the government's:

• Protective Security Requirements (PSR), and
• New Zealand Information Security Manual (NZISM).

It will complement existing certifications issued by the Government Chief Digital Officer (GCDO) for cloud services.

Who is offering certification

The GCDO, on behalf of the Government system leads is offering this new Public Cloud Data Centre Certification.

• Government system leads
• Public cloud versus other types of cloud

Benefits for agencies

This certification gives agencies confidence that:

• Public Cloud Data Centres they use meet their PSR obligations, and
• ownership, control, and supply chain risks will be reduced.

In line with the Cloud First policy, this certification supports agency use of public cloud for data classified at RESTRICTED or below.

• New Zealand government Cloud First policy
• Classify information — Restricted

Certified Public Cloud Data Centres

After we issue a Public Cloud Data Centre (PCDC) certification, we will list it on the page below:

Certified PCDC facilities and areas

Benefits for providers

For providers of Public Cloud Data Centres, getting certified:

• streamlines the certification and accreditation processes
• reduces the effort required to meet agency certification requests.

Eligible providers

This certification covers Public Cloud Data Centres that:

• Are onshore (in New Zealand)
• Offer ICT services to NZ government agencies.

Certification will consider risks around your data centres’ security in the following areas:

• physical
• personnel
• ownership
• supply chain.

Expression of interest

If you're a Public Cloud Data Centre provider wanting to be certified, submit an expression of interest:

Providers — expression of interest