BSA & Galexia Global Coud Computing Scorecard (2018) - Galexia Analytics Release

1. Overview
2. The 2018 Scorecard - Scores and Rankings
- 2018 Scorecard - All themes
- 2018 Scorecard - Legal & policy themes only (IT readiness and broadband theme removed)
3. Executive Summary and Overall Findings (from the BSA Report)
4. BSA Cloud Policy Blueprint
5. Key Findings Across Themes (from the BSA Report)
6. Country Checklist on a page
7. Country Summaries (including historic scores and ranks)
8. Themes and Criteria (updated for the 2018 Scorecard)
9. Scoring Methodology (updated for the 2018 Scorecard)
10. External links (view all BSA scorecards and dashboards developed by Galexia)

Full Contents

BSA & Galexia Global Cloud Computing Scorecard (2018) - Galexia Analytics Release

Galexia Authors:
Chris Connolly
Peter van Dijk

2018

The 2018 BSA Global Cloud Computing Scorecard ranks the cloud computing readiness of 24 countries that account for 80 percent of the world’s IT markets. Each country is graded on its strengths and weaknesses in seven key policy areas.

The 2018 BSA Global Cloud Computing Scorecard — the newest version of the only global report to rank countries’ preparedness for the adoption and growth of cloud computing services — features an updated methodology to better reflect cloud computing’s exponential growth over the past five years, putting additional emphasis on policy areas, including privacy laws, cybersecurity laws, and broadband infrastructure. Most countries continue to make improvements, the study finds, but some markets are falling further behind.

By examining the legal and regulatory framework of 24 countries, the Scorecard aims to provide a platform for discussion between policymakers and cloud service providers. This dialogue can help develop an internationally harmonized regime of laws and regulations that facilitate cloud computing.

1. Overview

BSA and Galexia Background

Related Galexia services and solutions

Cloud Computing Strategy and Advice. Read more »
International, Comparative and Cross-Border Research. Read more »
Cybersecurity Research and Advice. Read more »

Related Galexia news

Galexia has been working with The Software Alliance (BSA) since 2009 and has assisted in the development of an extensive body of cloud research, thought leadership and first to market analysis on key cloud issues.

Galexia has worked extensively with the Singapore, Washington and Brussels BSA offices and has engaged with BSA stakeholders in more than 20 countries.

About BSA

BSA | The Software Alliance (http://www.bsa.org) is the leading advocate for the global software industry before governments and in the international marketplace. Its members are among the world’s most innovative companies, creating software solutions that spark the economy and improve modern life.

With headquarters in Washington, DC, and operations in more than 60 countries, BSA pioneers compliance programs that promote legal software use and advocates for public policies that foster technology innovation and drive growth in the digital economy.

About Galexia

Galexia (http://www.galexia.com) is at the forefront of international research and advice in the areas of privacy, identity, cybersecurity and cloud — with a particular focus on global and cross-border legal and regulatory issues. The firm advises national governments, regional and global organizations (ASEAN and the United Nations), and the private sector (particularly ICT, health and financial services). The firm has expertise in the policy complexities that arise for countries and business addressing cross-border issues. Galexia publishes world-leading research publications, including the regular Cloud Scorecards, Cybersecurity Dashboards and reports on identity management, authentication, privacy and cyberlaws. The firm has specialist expertise in data governance, particularly the development and implementation of identity and authentication management systems, Privacy Impact Assessments and Cybersecurity strategies.

Galexia works closely with a range of international business and government clients to produce clear and effective outcomes from evidence-based research. The firm uses collaborative cloud-based reporting tools to provide real-time access to our research and analysis.

About this version of the report on the Galexia website

This version of the 2018 Cloud Scorecard reflects the final and official version as published on the BSA | Software Alliance Scorecard micro-site with additional embedded analytics and visualisations from Galexia.

The March 2018 release of the 4^th in this series of ground breaking reports is a great time to take stock and look at what we think are the fascinating and significant trends and patterns of global improvements over the past 6 years. We have included graphs, analysis and data not previously published.

There are number of components that go into building up the Cloud Readiness Scorecard & Report

Consistent themes, criteria and scoring methodology across all reports from 2012
24 country reports
Country checklist on a page - it is worth obtaining the BSA hard copy version of the report which has a double A4 foldout
Country summaries
Theme summaries
Consistent scoring across 72 criteria
Overall Score and Rankings
Detailed change tracking, identifying trends and rates of improvement

What has changed since previous scorecards?

Changes in the 2018 scorecard - from 2016	Changes in the 2016 scorecard - from 2013	Changes in the 2013 report - from 2012
The 2018 scorecard features an updated methodology to better reflect cloud computing’s exponential growth over the past five years, putting additional emphasis on policy areas, including privacy laws, cybersecurity laws, and broadband infrastructure. The underlying methodology has been improved and strengthened, with 13 amended criteria 7 criteria split to multiple - providing more fine-groaned analysis 21 new criteria Refer to Themes and Criteria (updated for the 2018 Scorecard) A new Scoring Methodology (updated for the 2018 Scorecard). The scores in the 208 Scorecard is not directly comparable with the 3 earlier reports due to the changes in criteria and the scoring methodology. Includes 2 new Issues Briefs. Country reports translated into 4 languages ( Brazil, China, Japan and Vietnam) and additional translations are in the pipeline.	Updates across 24 countries and 66 criteria, including: 32 significant (positive) changes 73 moderate (positive) changes 10 significant (negative) changes 24 moderate (negative) changes 292 minor (no effect) changes 504 infrastructure changes Tracks change in score and rank from 2013 Full scorecard report translated into 3 languages (Korean, Spanish & Thai) Country reports translated into 7 languages ( Argentina, China, Germany, Korea, Japan, Mexico & Thailand) Includes 2 new case studies.	Updates across 24 countries and 66 criteria, including: 27 significant (positive) changes 34 moderate (positive) changes 0 significant (negative) changes 6 moderate (negative) changes 108 minor (no effect) changes 432 infrastructure changes Tracks change in score and rank from 2012 Includes 3 new case studies.
[2018 Scorecard on BSA microsite]	[2016 Scorecard on BSA microsite]	[2013 Scorecard on BSA microsite]

2. The 2018 Scorecard - Scores and Rankings

By focusing new attention on the policy areas that matter most to cloud computing, the 2018 Scorecard shows continuing improvements in the policy environment for cloud computing in key global economies.

2018 Scorecard - All themes

2018 Scorecard - Legal & policy themes only (IT readiness and broadband theme removed)

3. Executive Summary and Overall Findings (from the BSA Report)

Five years is an extremely long time in today’s technology-driven era, and the global cloud computing market has grown exponentially in the five innovation-filled years since BSA | The Software Alliance launched the initial Global Cloud Computing Scorecard.

Consider just a few changes: In 2013 when BSA released the first Scorecard, the demand for cloud computing came largely from start-ups and other small companies. In 2018, though, analysts predict that more than half of enterprises will have adopted cloud computing worldwide and that cloud applications, platforms, and services will continue to radically change the way enterprises compete for customers.[1]Governments, recognizing the cost-effective and far-reaching power of the technology, are increasingly adopting cloud-based tools as well. According to market experts, between 2012 and 2015 the demand for cloud computing accounted for 70 percent of related IT market growth — and it is expected to represent 60 percent of growth through 2020.[2]

In light of that growth — and changes in markets around the world — BSA opted to update the way
it ranks countries’ preparedness for the adoption and growth of digital services. The result of that re- examination is the 2018 BSA Global Cloud Computing Scorecard, the newest and most comprehensive version of the only report to regularly track change in the international policy landscape for cloud computing.

These new rankings put additional emphasis on the policy areas that matter most to cloud computing, such as privacy laws that protect data without unnecessarily restricting its movement across borders and cybersecurity regimes that promote the proper protection of consumer and business data without freezing into place out-dated and unneeded regimes. In addition, questions to assess intellectual property protections have been extensively revised to focus on cloud-relevant issues, including new questions on trade secrets and patents.

Using the Scorecard, BSA has tracked the evolution of the legal and regulatory environment for cloud computing in 24 countries around the world. This year’s results clearly demonstrate several important points. The new methodology reveals a similar overall pattern. The rankings fall into three general categories with a group of top-performing countries (e.g., the EU nations, Japan, the United States, Australia, Singapore, and Canada) being pursued by countries like Korea, Mexico, Malaysia, and South Africa. Bringing up the rear are a small group of nations that have failed to embrace the international approach: Russia, China, Indonesia, and Vietnam.


	Countries continue to update and refine their data protection regimes — most often in a way that ensures important cross-border data transfers.

Among the other key findings of the 2018 Scorecard:

Advanced privacy and security policies set leading countries apart from lagging markets
- Countries continue to update and refine their data protection regimes — most often in a way that ensures important cross-border data transfers. Canada again scored highest in the privacy category based on its comprehensive legal regime that avoids onerous registration requirements.
- Japannow has a new central regulator in place to accompany its recently adopted comprehensive privacy legislation, and those elements are complemented by effective enforcement provisions.
- Turkey adopted its new Law on Personal Data Protection in 2016 (in addition to signing the Convention on Cybercrime, which came into force in Turkey in 2015). These developments help to create a positive environment for building consumer trust in cloud services.
- Several countries, however, still have not adopted adequate privacy laws. Brazil and Thailand do not have comprehensive laws, and the laws in China, India, Indonesia, and Vietnam remain very limited.
Emerging markets continue to lag in the adoption of cloud-friendly policies, hindering their growth
- Indonesia continues to update and reform laws and regulations in the information technology (IT) sector, but the result has not been positive for cloud computing. Regulations impose significant barriers for cloud service providers, including requirements for providers to register their services with a central authority and rules that force some providers to establish local data centers and hire local staff.
- Russia’s laws on both privacy and cybercrime do not follow recognized international standards. Russia requires data operators to store the personal data of Russian citizens on servers based in Russia. This data localization requirement has a significant negative impact on the digital economy.
- Vietnam falls short in several key policy categories, scoring just one point for security (with no national cybersecurity strategy in place) and just half a point in efforts to promote free trade.
Deviations from widely adopted regimes and international agreements hold back key markets
- Japanwhich has finished atop the rankings in every previous version of the Scorecard, scores strongly in most policy categories but its scores slip sharply in Support for Industry-Led Standards and International Harmonization of Rules. It is the only leading market to not have a general law on e-commerce.
- The Budapest Convention on Cybercrime is the first international treaty that aimed to harmonize national laws, improve investigative techniques, and increase cooperation among nations in order to fight Internet and computer crime. The convention has been widely adopted or mirrored through national regimes. Only two countries have failed to follow their lead: China and Korea.
- Internationally accepted standards, certification, and testing help improve the security environment for cloud computing, but not every country recognizes such best practices as meeting local standards. The holdouts include countries that might be expected to have protectionist policies (e.g., China, Indonesia, Russia, and Vietnam), but they also include countries like Argentina, India, Mexico, and South Africa.


	The ability of countries and companies to leverage cloud computing for growth requires that they be able to access a powerful network; the new methodology puts increased emphasis on the IT Readiness, Broadband Deployment category.

Those few countries that have embraced localization policies pay a heavy price
- After years of concerns about restrictive policies in Russia, the effect of those policies are becoming more clear. This year, for the first time in the history of the Scorecard a country finished with a zero in one of the scoring categories. Russia’s failure to embrace technology neutrality in government procurement and its cumbersome Internet filtering and censorship regulations act as a barrier to cloud computing.
- These policies are not without financial effects. Consider that in 2012 the research firm IDC found that Russia’s cloud computing market had grown more than 417 percent to nearly $60 million and was projected to continue to grow by more than 50 percent in the years ahead.[3]By 2017, though, IDC was finding growth in the Russian cloud market of just 9.9 percent — far behind the global growth of 19 percent.[4]
- Vietnam also continues to impose severe censorship and restrictions on Internet content. That fact is further complicated by the country’s failure to develop appropriate laws on government procurement and other trade barriers.
Increased emphasis on IT readiness and broadband Deployment leads to interesting results
- The ability of countries and companies to leverage cloud computing for growth requires that they be able to access a powerful network; the new methodology puts increased emphasis on the IT readiness and broadband Deployment category. Although almost all countries continue to work to improve broadband penetration, the success of those efforts remains very inconsistent.
- Singapore Japan, and Korea score highest in the category — boosted by the successful efforts to boost their national broadband plans.
- Certain countries’ high IT Readiness scores may be masking weaknesses in other areas of cloud policy. For example, when infrastructure scores are removed, Japan ranking plummets from No. 2 to No. 10. Likewise, Korea scores nearly 20 points for IT Readiness and rounds out the top tier of countries in the rankings. But it finishes much closer to middle-tier countries like Mexico and South Africa in an examination of the countries’ pure policy rankings.

4. BSA Cloud Policy Blueprint

The economic growth predicted to flow from cloud computing — and the resulting transformation of both businesses and national economies — is predicated on the proper policies being in place in each of the seven areas used in the BSA Cloud Scorecard:

Ensuring data privacy: The success of cloud computing depends on users’ faith that their information will not be used or disclosed in unexpected ways. At the same time, to maximize the benefit of the cloud, providers must be free to move data through the cloud in the most efficient way.
Promoting security: Users must be assured that cloud computing providers understand and properly manage the risks inherent in storing and running applications in the cloud. Cloud providers must be able to implement cutting-edge cybersecurity solutions without being required to use specific technologies.
Battling cybercrime: In cyberspace, as in the real world, laws must provide meaningful deterrence and clear causes of action. Legal systems should provide an effective mechanism for law enforcement, and for cloud providers themselves, to combat unauthorized access to data stored in the cloud.
Protecting intellectual property: In order to promote continued innovation and technological advancement, intellectual property laws should provide for clear protection and vigorous enforcement against misappropriation and infringement of the developments that underlie the cloud.
Ensuring data portability and the harmonization of international rules: The smooth flow of data around the world — for example, between different cloud providers — requires efforts to promote openness and interoperability. Governments should work with industry to develop standards, while also working to minimize conflicting legal obligations on cloud providers.
Promoting free trade: By their very nature, cloud technologies operate across national boundaries. The cloud’s ability to promote economic growth depends on a global market that transcends barriers to free trade, including preferences for particular products or providers.
Establishing the necessary IT infrastructure: Cloud computing requires robust, ubiquitous, and affordable broadband access. This can be achieved through policies that provide incentives for private sector investment in broadband infrastructure and laws that promote universal access to broadband.

The move to the cloud and capitalization on its benefits across the board is hardly inevitable, and an urgent task lies ahead for governments. In order to obtain the benefits of the cloud, policymakers must provide a legal and regulatory framework that will promote innovation, provide incentives to build the infrastructure to support it, and promote confidence that using the cloud will bring the anticipated benefits without sacrificing expectations of privacy, security, and safety

5. Key Findings Across Themes (from the BSA Report)

Key Findings

Five short years ago, cloud computing was a new tool — a next-generation technology that promised to help companies and countries unlock greater productivity and expanded economic growth. It was with that perspective that BSA | The Software Alliance launched the Global Cloud Computing Scorecard — a resource to help policymakers shape the proper legal and regulatory environment to encourage the growth of the cloud in their markets.

Fast forward to today and cloud computing is a widely adopted technology that powers global businesses and helps governments better connect with their citizens on a daily basis. Based on that evolution BSA | The Software Alliance believed that 2018 presented an opportunity to step back and reassess the Scorecard — the only report to regularly track change in the relevant international policy landscape. With companies and governments increasingly moving their key IT processes to the cloud, the mix of important policy considerations has become increasingly clear:

Privacy laws must ensure the proper protection for users’ data without restricting the ability of companies and users to move data across borders to maximize its value.
Security laws must help shape an environment where cloud computing providers can implement cutting-edge cybersecurity solutions without being handcuffed by requirements to use specific technologies. Users also must be able to trust that cloud computing providers understand and properly manage the risks inherent in storing and running applications in the cloud.
When it comes to delivering the cloud, countries must invest in the appropriate infrastructure. Cloud users must have access to robust, ubiquitous, and affordable broadband, which requires policies that provide incentives for private sector investment in broadband infrastructure and laws that promote universal access to broadband.

Some basic fundamentals have not changed. IT remains integral to every nation’s economic growth. Cloud computing adds to the importance of IT by increasing access to technology that drives economic growth at the global, national, and local levels.

Cloud computing democratizes the use of advanced technologies. It allows anyone — a start-up, an individual consumer, a government, or a small business — to access technology previously available only to large organizations. These services in return have opened the door to unprecedented connectivity, productivity, and competitiveness.

Countries that offer a policy environment in which cloud-computing services can flourish gain in productivity and economic growth. The countries with the most favourable policies are those in which the free movement of data, privacy, intellectual property protections, robust deterrence, and enforcement of cybercrime are all important priorities. Many countries also recognize that coordination of national cloud computing policies with those of other nations will facilitate benefits for all countries participating in the global economy.

But countries inhibiting, or failing to support, the use of cloud computing will not keep pace with those embracing the tool.

The Scorecard has for five years ranked the IT infrastructure and policy environment — or cloud computing readiness — of 24 countries that account for 80 percent of the world’s IT markets. Each country is graded on its strengths and weaknesses in seven key policy areas. The 2018 BSA Global Cloud Computing Scorecard, though, focuses new attention on the policy areas that matter most to cloud computing.

The 2018 Scorecard shows continuing improvements in the policy environment for cloud computing in key global economies since the 2016 version of the Scorecard.

These new rankings put additional emphasis on the policy areas that matter most to cloud computing, things like privacy laws that protect data without unnecessarily restricting its movement across borders and cybersecurity regimes that promote the proper protection of consumer and business data without freezing into place out-dated and unneeded regimes. In addition, questions to assess intellectual property protections have been extensively revised to focus on cloud-relevant issues, including new questions on trade secrets and patents.


	The 2018 Scorecard shows continuing improvements in the policy environment for cloud computing in key global economies.

Data Privacy

Cloud users need to trust that their data, which may be stored anywhere in the world, will not be used
or disclosed by a cloud provider in unauthorized ways. Countries can provide these assurances with appropriate privacy laws. But it is a delicate balance — unnecessarily burdensome restrictions will hinder the important advantages of cloud computing that users want and need.

This section of the Scorecard examines how countries are managing these competing interests. Overall, the concern for privacy has produced many positive results across jurisdictions, including significant law reform and a greater public awareness of data privacy issues.

Most countries in the Scorecard have data protection frameworks in place and have established independent privacy commissioners. Many of the data protection laws are now being updated to meet new international standards — such as the European Union General Data Protection Regulation (GDPR) and the APEC Cross Border Privacy scheme (CBPRs).

Unfortunately, privacy laws are still absent or insufficient in several countries. Brazil and Thailand have no comprehensive laws in place, while laws in China, India, Indonesia, and Vietnam remain very limited.

A small number of countries have adopted or proposed prescriptive data localization regimes that would require cloud providers to restrict the free flow of data or build costly — and unnecessary — servers in order to provide services in a specific market.

Canada and Mexico score highest in the privacy section, offering comprehensive privacy regimes without onerous registration requirements. Countries with no laws ( Brazil and Thailand) and countries with prescriptive data localization requirements (such as Russia and Indonesia) score poorly in this section.

Security

Users of cloud computing and other digital services need to be certain that cloud service providers can manage the security risks of storing their data and running their applications on cloud systems. Large- scale national and international cybersecurity attacks are now common.

This section examines how countries manage and regulate cybersecurity, security certification, and security testing.

This year’s Scorecard indicates that many countries have implemented national cybersecurity strategies. Many of these national strategies promote a joint public-private approach to the management of cybersecurity. Overall, this is a positive development, although Argentina, Mexico, and Vietnam are yet to develop and implement strategies.


	Overall, the Scorecard finds that most countries are rising to the challenge of protecting data from cyber attack and physical security breaches.

Most cloud computing applications are designed to meet internationally recognized security standards, and this approach is supported by most countries in the Scorecard. This means that a product tested in one country can be recognized in other countries. However, the Scorecard reveals that some overly prescriptive security requirements that duplicate accepted international standards and impose onerous local requirements have been introduced. For example, China, India, and Korea have all introduced some local security testing requirements.

The United Kingdom, Germany, France, Australia, the United States, and Japan score highest in the security section. Mexico, Argentina, and Vietnam record the lowest scores — mainly due to delay in implementing national cybersecurity strategies.

Cybercrime

The huge quantities of data that companies and governments store in their computer networks have long attracted the attention of bad actors. In order to protect data holders and deter cyber criminals, governments must use legislative, investigative, and enforcement tools.

This section examines cybercrime laws, as well as rules relating to investigation and enforcement.

Overall, the Scorecard finds that most countries are rising to the challenge of creating legal regimes to protect data from cyberattack and physical security breaches. Most countries studied have legislation to combat the unauthorized access of data stored in the cloud. Most also have implemented cybercrime laws, many of which are compatible with the Convention on Cybercrime. Italy, Japan, Poland, and Spain all score very highly in this section of the Scorecard.

Unfortunately, a few key jurisdictions still have gaps and inconsistencies in their cybercrime laws. China and Vietnam score poorly in this section of the Scorecard.

The Scorecard also asks whether local laws and policies on access to data by law enforcement authorities avoid technology specific mandates (e.g., requirements for specific tools that allow access to encrypted data). These mandates may act as a barrier to the supply of security products and services. There was a wide divergence on this issue and on other issues related to the investigation and prosecution of cybercrime.

Intellectual Property Rights

As with the creators of other highly innovative and fast-evolving products, providers of cloud computing services rely on a combination of patents, copyrights, trade secrets, and other forms of intellectual property protection. To encourage investment in cloud research and development, intellectual property

laws must provide clear protections and effective enforcement of misappropriation and infringement. Online intermediaries should be offered incentives to operate responsibly and should enjoy safe harbor from copyright liability when they do so.

This section examines the intellectual property protections in place in the countries studied, as well as their approaches to implementation and enforcement. The Intellectual Property criteria for this year’s Scorecard was extensively revised to focus on issues that are most relevant to cloud computing, including new questions on trade secrets and patents.

The United Kingdom, Singapore, and the United States all score very highly in the Intellectual Property section, reflecting their combination of modern laws and effective enforcement. Unfortunately, many countries struggled to achieve good results in this section, with Vietnam, Malaysia, Turkey, and India recording the lowest scores. However, numerous proposed and draft laws and regulations exist across the countries in the study, and this may be a section where we see strong improvements in the coming years.

Standards and International Harmonization of Rules

Users need data portability and seamless interoperable applications if they are to make full use of cloud-computing services and the digital economy. IT industry organizations are developing international standards that will ensure optimal portability. Government support for these voluntary, industry- led efforts is highly important. Countries must also promote global harmonization of e-commerce rules, tariffs, and relevant trade rules.

This section examines the extent to which governments have encouraged industry-led processes and promoted harmonization of e-commerce rules.

The Scorecard reveals that some countries have moved away from accepting international standards and international certifications, most notably China, India, Indonesia, Korea, and Russia.

Although tariffs and trade barriers for online software and applications continue to be rare, they continue
to hinder new technology products used to access cloud services in a few countries. Argentina, Brazil, and Russia all score poorly in this section.

Promoting Free Trade

Cloud services operate across national boundaries, and their success depends on access to regional and global markets. Restrictive policies that create actual or potential trade barriers will inhibit or slow the evolution of cloud computing.

This section examines government procurement regimes and the existence or absence of barriers to free trade, including each country’s requirements and preferences for particular products. The section also examines whether countries support international efforts to standardize and liberalize trade and procurement policies, allow cloud providers to operate free from tariffs and other trade barriers, and avoid laws or policies that impose data localization requirements.

The Scorecard indicates that a number of countries still provide preferential treatment for domestic suppliers in government procurement or have introduced other barriers to international trade. Indeed, this section of the Scorecard reveals the widest divergence between countries. A small group of countries scored close to the maximum points — Canada, Germany, the United States, Poland, and Japan — while a number of countries score no points or almost no points, including China, India, Vietnam, and Russia.

IT readiness and broadband Infrastructure

Digital economies and cloud computing require extensive, affordable broadband access, which in turn requires incentives for private sector investment in infrastructure and laws and policies that support universal access.

This section of the Scorecard examines and compares the infrastructure available in each country to support the digital economy and cloud computing. It is based on detailed comparative statistics on a range of important IT indicators, including the presence of a national broadband plan, a country’s International Connectivity Score and International Internet Bandwidth. In addition, the Scorecard includes statistics on the number of subscribers for key services, such as mobile broadband subscriptions.

Despite major infrastructure improvements underway in a number of countries, broadband penetration remains very inconsistent. As a result, some countries continue to have low infrastructure scores. Countries that do not yet have sufficient infrastructure continue to be at risk of missing the economic benefits of the digital economy and cloud computing.

Singapore, Japan, and Korea achieve the highest results in this section of the report. As IT readiness and broadband Deployment is worth 25 percent of the overall score in this year’s Scorecard, this strong result helps to lift the overall rankings for these countries. For example, Japan jumps from 10th in the Scorecard rankings to 2nd once the infrastructure scores are included. Most of the other countries in the Scorecard receive a similar ranking whether or not infrastructure scores are included.

The poorest performers in this section of the Scorecard are Vietnam, Indonesia, and India.

6. Country Checklist on a page

BSA produce a fantastic hardcopy of the report - contained within this is a double page double sided foldout.

View the Country Checklist (PDF) »

The BSA Global Cloud Computing Scorecard examines the legal and regulatory framework of 24 countries around the world, identifying 72 criteria that are relevant to determining readiness for cloud computing. The questions are categorized under the 8 policy themes, and are generally framed so as to be answerable by “yes” or “no.” The answers are also color coded:

[YES] Indicates a positive assessment, which is generally considered to be an encouraging step toward the establishment of a favorable legal and regulatory environment for cloud computing.

[NO] Indicates a negative assessment and the presence of a potential barrier to the establishment of a favorable legal and regulatory environment for cloud computing.

[PARTIAL] Indicates that the assessment is positive in part, although some gaps or inconsistencies may exist that require further remedial work.

Indicates a fact-finding question on relevant issues.

The Scorecard aims to provide a platform for discussion between policymakers and providers of cloud offerings, with a view toward developing an internationally harmonized regime of laws and regulations relevant to cloud computing. It is a tool that can help policymakers conduct a constructive self-evaluation, and determine the next steps that need to be taken to help advance the growth of global cloud computing.

Responses for the infrastructure portion of the Scorecard are color coded based on the scale below. That is, the “highest” answer to a particular question (e.g., the largest population or highest number of Internet users) is indicated in bright green, and the color for other responses graduates down to the lowest response in red.

7. Country Summaries (including historic scores and ranks)

2018 Rank 1. Germany - Score: 83.95 | Change from 2016 - Rank: +2

Germany provides strong protection for cloud services, through a combination of comprehensive cybercrime legislation as well as an up-to-date cybersecurity strategy. Germany also has modern electronic commerce and electronic signature laws.

Germany has comprehensive privacy legislation, but it includes onerous registration requirements that may act as a cost barrier for the use of cloud computing.

Germany has a strong commitment to international standards and interoperability.

In the area of intellectual property, Germany offers good protection but there are some areas in which improvement could be made including further trade secrets protection.

Germany is making good progress on extending broadband access to the population. Its current target is to ensure that all households have access to broadband with speeds of at least 50 Mbps by the end of 2018.

Although Germany’s overall rank has improved since the last Scorecard — from third to first place — this stemmed largely from the rebalancing of the Scorecard methodology. The country’s improved scores in the security section of the report also contributed to the increase.

The rank for Germany in this year's Scorecard is:
- 1st overall,
- 1st for legal and policy, and
- 5th for IT readiness and broadband deployment.

Within legal and policy themes for cloud readiness Germany has the following rankings:
- 3rd for data privacy
- 2nd for security
- 5th for cybercrime
- 7th for intellectual property rights
- 5th for standards and international harmonization
- 2nd for promoting free trade





	home about us services projects research contact
	» home » research » assets » bsa global cloud computing scorecard 2018

BSA & Galexia Global Coud Computing Scorecard (2018) - Galexia Analytics Release

1. Overview

BSA and Galexia Background

About BSA

About Galexia

About this version of the report on the Galexia website

What has changed since previous scorecards?

2. The 2018 Scorecard - Scores and Rankings

2018 Scorecard - All themes

2018 Scorecard - Legal & policy themes only (IT readiness and broadband theme removed)

3. Executive Summary and Overall Findings (from the BSA Report)

4. BSA Cloud Policy Blueprint

5. Key Findings Across Themes (from the BSA Report)

Key Findings

Data Privacy

Security

Cybercrime

Intellectual Property Rights

Standards and International Harmonization of Rules

Promoting Free Trade

IT readiness and broadband Infrastructure

6. Country Checklist on a page

7. Country Summaries (including historic scores and ranks)

2018 Rank 1. Germany - Score: 83.95 | Change from 2016 - Rank: +2

2018 Rank 2. Japan - Score: 82.09 | Change from 2016 - Rank: -1

2018 Rank 3. United States - Score: 82.04 | Change from 2016 - Rank: -1

2018 Rank 4. United Kingdom - Score: 81.84 | Change from 2016 - Rank: +5

2018 Rank 5. Australia - Score: 80.61 | Change from 2016 - Rank: +1

2018 Rank 6. Singapore - Score: 80.21 | Change from 2016 - Rank: +1

2018 Rank 7. Canada - Score: 79.98 | Change from 2016 - Rank: -3

2018 Rank 8. France - Score: 79.57 | Change from 2016 - Rank: -3

2018 Rank 9. Italy - Score: 79.02 | Change from 2016 - Rank: -1

2018 Rank 10. Spain - Score: 78.37 | Change from 2016 - Rank: +1

2018 Rank 11. Poland - Score: 76.99 | Change from 2016 - Rank: -1

2018 Rank 12. Korea - Score: 72.2 | Change from 2016 - Rank: same

2018 Rank 13. Mexico - Score: 60.61 | Change from 2016 - Rank: +2

2018 Rank 14. Malaysia - Score: 59.26 | Change from 2016 - Rank: -1

2018 Rank 15. South Africa - Score: 57.33 | Change from 2016 - Rank: -1

2018 Rank 16. Turkey - Score: 54.3 | Change from 2016 - Rank: +3

2018 Rank 17. Argentina - Score: 51.75 | Change from 2016 - Rank: -1

2018 Rank 18. Brazil - Score: 50.27 | Change from 2016 - Rank: +4

2018 Rank 19. Thailand - Score: 48.4 | Change from 2016 - Rank: +2

2018 Rank 20. India - Score: 48.39 | Change from 2016 - Rank: -2

2018 Rank 21. Russia - Score: 44.99 | Change from 2016 - Rank: -4

2018 Rank 22. China - Score: 43.71 | Change from 2016 - Rank: +1

2018 Rank 23. Indonesia - Score: 40.67 | Change from 2016 - Rank: -3

2018 Rank 24. Vietnam - Score: 36.36 | Change from 2016 - Rank: same

8. Themes and Criteria (updated for the 2018 Scorecard)

9. Scoring Methodology (updated for the 2018 Scorecard)

10. External links (view all BSA scorecards and dashboards developed by Galexia)