Questions and responses 45th Parliament, 1st session May 26, 2025, to present

With regard to expenditures by government departments or agencies on cloud services, broken down by fiscal year since 2021-22: (a) what was the total amount spent on cloud services from (i) Amazon, (ii) Amazon Web Services, (iii) Microsoft, (iv) Google; and (b) broken down by vendor in (a)(i) to (a)(iv), what is the nature and criticality of the government functions and data that rely on their cloud services?

With regard to incidents involving Microsoft's cloud services referenced in the "National Cyber Threat Assessment 2025-2026" and, specifically, the compromise of Microsoft Exchange Online during the summer of 2023, the breach of Microsoft's cloud-based enterprise service by Russian state-sponsored actors in January 2024, and the Azure disruption in July 2024: (a) which government departments or agencies were impacted by the compromise of Microsoft Exchange Online in the summer of 2023; (b) which government departments or agencies were impacted by Russian state-sponsored actors accessing Microsoft's corporate email accounts in January 2024; (c) which government departments or agencies were impacted by the Microsoft Azure cloud service disruption in July 2024; and (d) for the incidents in (a), (b), and (c), what was the (i) nature, (ii) date, (iii) duration, of the impact on government operations?