I do not agree they should use "the cloud" but what is all too common is local, city, state, and even federal governments, love to enforce regulations and laws upon others they do not obey themselves.
the first rule of laws and regulations should be, government must adhere to the letter if they are to be enforced upon others seeking penalties if compliance is not met.
it is really difficult to hold government agencies responsible, it doesn't even have to be computer security, just look at the number of cities in the US who violate lead levels in water. even better, in the US, a lot of what happens can be protected from suits by sovereign immunity.
So keep it simple, what is required of private organizations and people is the minimum standard that a government agency must meet
the first rule of laws and regulations should be, government must adhere to the letter if they are to be enforced upon others seeking penalties if compliance is not met.
it is really difficult to hold government agencies responsible, it doesn't even have to be computer security, just look at the number of cities in the US who violate lead levels in water. even better, in the US, a lot of what happens can be protected from suits by sovereign immunity.
So keep it simple, what is required of private organizations and people is the minimum standard that a government agency must meet