South Africa National Policy on Data and Cloud (2024)
South Africa's gazetted National Policy on Data and Cloud 2024: unified government data centres and SITA sourcing, data centre siting, certification, uptime and self-supplied power, cloud first, digitisation and classification of government data, open data, cybersecurity by design, data protection and security, in-country storage of national security data, cross-border agreement criteria, skills, provider transparency on portability and the frameworks regulators and SITA develop.
South Africa National Policy on Data and Cloud (2024) is a compliance framework from South Africa with 5 domains and 19 controls. The largest domains are 15.1: Digital infrastructure and government data centres – South Africa National Policy on Data and Cloud (2024) (6 controls), 15.2: Access to data and cloud services – South Africa National Policy on Data and Cloud (2024) (4 controls), 15.3: Digital trust, security and data protection – South Africa National Policy on Data and Cloud (2024) (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (5)
15.1: Digital infrastructure and government data centres – South Africa National Policy on Data and Cloud (2024)
| Code | Title |
|---|---|
| south-africa-national-policy-on-data-and-cloud-2024::15.1.10 | Government departments and entities prioritise cloud services for new ICT procurement |
| south-africa-national-policy-on-data-and-cloud-2024::15.1.11 | Data centre operators provide their own backup electricity and water supply |
| south-africa-national-policy-on-data-and-cloud-2024::15.1.2 | Store government data in unified, cloud-enabled data centres with redundancy for continuity |
| south-africa-national-policy-on-data-and-cloud-2024::15.1.3 | SITA sources government data infrastructure and cloud services and monitors service level agreements |
| south-africa-national-policy-on-data-and-cloud-2024::15.1.4 | Govern access to government data by the Minimum Information Security Standards |
| south-africa-national-policy-on-data-and-cloud-2024::15.1.6 | Data centres comply with siting, environmental, certification, uptime and self-supply requirements |
15.2: Access to data and cloud services – South Africa National Policy on Data and Cloud (2024)
| Code | Title |
|---|---|
| south-africa-national-policy-on-data-and-cloud-2024::15.2.1 | Capture or convert all government data into digital format, using SMME services |
| south-africa-national-policy-on-data-and-cloud-2024::15.2.5 | Classify all digital government data as public or open, confidential or sensitive, secret or top secret |
| south-africa-national-policy-on-data-and-cloud-2024::15.2.6 | Keep public or open data accessible without expiry and available on demand from the cloud |
| south-africa-national-policy-on-data-and-cloud-2024::15.2.8 | Private sector makes data available for development purposes under data protection law |
15.3: Digital trust, security and data protection – South Africa National Policy on Data and Cloud (2024)
| Code | Title |
|---|---|
| south-africa-national-policy-on-data-and-cloud-2024::15.3.1.6 | Build cybersecurity by design, with threat warning, into all government digital technologies across the data lifecycle |
| south-africa-national-policy-on-data-and-cloud-2024::15.3.2 | Take appropriate security measures and adhere to South African data protection law in providing data and cloud services |
| south-africa-national-policy-on-data-and-cloud-2024::15.3.4 | Public bodies protecting personal and government data run public awareness campaigns |
15.4: Cross-border data transfers and data sovereignty – South Africa National Policy on Data and Cloud (2024)
| Code | Title |
|---|---|
| south-africa-national-policy-on-data-and-cloud-2024::15.4.1 | Process data collected in South Africa, including cross-border sharing, under South African data protection and security law |
| south-africa-national-policy-on-data-and-cloud-2024::15.4.2 | Store government data bearing on national security and sovereignty only on infrastructure within South Africa |
| south-africa-national-policy-on-data-and-cloud-2024::15.4.3 | Enter cross-border data transfer and sharing agreements only on the stated criteria |
15.5 to 15.8: Skills, competition, research and governance – South Africa National Policy on Data and Cloud (2024)
| Code | Title |
|---|---|
| south-africa-national-policy-on-data-and-cloud-2024::15.5.7 | Provide skills and capacity programmes for cloud-based technologies |
| south-africa-national-policy-on-data-and-cloud-2024::15.6.3 | Cloud providers disclose portability and interoperability costs and technical implications at contracting |
| south-africa-national-policy-on-data-and-cloud-2024::15.8.2 | Sector regulators, the DPSA and SITA develop the regulatory frameworks, norms, standards and guidelines that support the policy |
What is South Africa National Policy on Data and Cloud (2024) and who does it apply to?
South Africa National Policy on Data and Cloud (2024) is a compliance framework from South Africa with 5 domains and 19 controls. South Africa's gazetted National Policy on Data and Cloud 2024: unified government data centres and SITA sourcing, data centre siting, certification, uptime and self-supplied power, cloud first, digitisation and classification of government data, open data, cybersecurity by design, data protection and security, in-country storage of national security data, cross-border agreement criteria, skills, provider transparency on portability and the frameworks regulators and SITA develop. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does South Africa National Policy on Data and Cloud (2024) actually require?
South Africa National Policy on Data and Cloud (2024) has 19 controls organised across 5 domains. The largest domains are 15.1: Digital infrastructure and government data centres – South Africa National Policy on Data and Cloud (2024) (6 controls), 15.2: Access to data and cloud services – South Africa National Policy on Data and Cloud (2024) (4 controls), 15.3: Digital trust, security and data protection – South Africa National Policy on Data and Cloud (2024) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of South Africa National Policy on Data and Cloud (2024) do I already cover?
South Africa National Policy on Data and Cloud (2024) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement South Africa National Policy on Data and Cloud (2024)?
Start your South Africa National Policy on Data and Cloud (2024) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about South Africa National Policy on Data and Cloud (2024) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 19 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required