The Stichting Internet Domeinregistratie Nederland (SIDN) is moving its zone file database to a Dutch cloud provider. The foundation is doing so on the advice of the AIVD.
"Due to the findings from the AIVD risk analysis, SIDN may host a more limited portion of their Domain Registration System (DRS) in the AWS public cloud than they previously intended," Minister of Economic Affairs Beljaarts wrote in a letter to the House of Representatives.
"This database forms the primary, reliable and trusted source on the basis of which the generation, signing and publication of the zone file outside AWS at a Dutch cloud provider takes place. (...) By taking these measures, we are limiting dependence on AWS and ensuring (digital) autonomy," SIDN commented.
The Court of Audit is also critical of central government's cloud policy. In the recently published report Het Rijk in de cloud - Donkere wolken pakken samen (The State in the Cloud - Dark clouds gather ), the Court of Audit states that the central government has insufficient control over its cloud use and does not sufficiently consider the risks.
"Let me put it bluntly: there is a risk that foreign governments, especially the U.S., can access and perhaps even modify information of the Dutch national government or of citizens. Whether they do so is a second thing, but if they want to, they can," said Ewout Irrgang, college member of the Netherlands Court of Audit.
Click here for the Court's report.
