Ownership and permissions
Clarify information categories, permitted uses, administrator authority, sharing permissions, retention and accountability.
Data sovereignty & AWSYour information.
Your information.
Your authority.
Support for First Nations’ data sovereignty priorities through Amazon Web Services (AWS), with governance, technical requirements and responsibilities defined around your Nation.
NATION CONTROL OVER INFORMATION
Start with your Nation’s requirements.
Decide what information matters, how it may be used and who is accountable for protecting it.
We work alongside your leadership, information stewards and existing IT team to define the requirement and coordinate qualified technical specialists. Examples for discussion may include administration, economic-development, housing or land records.
GOVERNANCE & CLOUD SUPPORT
Three parts of a workable plan.
Cloud technology can support the Nation’s objectives when governance, system choices and ongoing responsibilities are considered together.
Location and access
Assess hosting options, service-specific data flows, encryption and key control, permissions, backups, recovery and access logging with specialists.
Support and continuity
Define implementation, testing, monitoring, training, incident responsibilities, recurring costs and provider exit arrangements.
AWS HOSTING OPTIONSCanadian location.
Canadian location.
Clear responsibilities.
AWS offers Canada (Central), near Montréal, and Canada West (Calgary) Regions. Service availability and the required design must be assessed for each workload.
AWS Canada data privacy guidance ↗Review the complete information path
The assessment considers primary storage, processing, backups, logs and connected services against the Nation’s location requirements.
Define operational responsibility
AWS manages the underlying cloud infrastructure. Customers retain responsibilities that depend on the services selected, including their data and permissions. The delivery plan assigns the Nation’s and its providers’ operational duties.
AWS shared responsibility model ↗Canadian hosting alone does not establish First Nations data sovereignty. Governance, contractual requirements and technical controls need to work together.
FIRST NATIONS INFORMATION GOVERNANCE
Governance defined by the Nation.
The First Nations principles of OCAP® address ownership, control, access and possession of First Nations information. Each Nation’s own requirements guide the assessment and any proposed solution.
We identify the questions for leadership, information stewards, qualified counsel and technical specialists to resolve. A cloud service or hosting location does not automatically establish alignment with those requirements.
Learn about OCAP® from FNIGC ↗A DEFINED FIRST ASSIGNMENT
A data sovereignty assessment.
A practical options brief before an implementation commitment.
Start with one Nation lead, an overview of current systems and a discussion of priority information and requirements. Agree confidentiality and safe access before reviewing sensitive records.
Discuss a data sovereignty assessmentFROM ASSESSMENT TO APPROVED WORK
Define the next step before committing.
Steve and Royce coordinate the agreed assignment. Qualified technical specialists retain their own design, implementation and support responsibilities.
Start with one priority.
Tell us what your Nation is considering, what work already exists and when a decision is needed.