APPENDIX B: Shared Services Canada evaluation of hosting services
Title: Evaluation of Modernization of Hosting Services (Linux/Unix)
Author: Shared Services Canada, Office of Audit and Evaluation
Published: August 12, 2025 (page last updated February 3, 2026)
Accessed: September 27, 2026
URL: https://www.canada.ca/en/shared-services/corporate/about-us/transparency/audits-evaluations/2025-26/evaluation-modernization-hosting-services-linux-unix.html
Period covered: 2020-21 to 2023-24, with data collected in 2024.
Scope: SSC's Linux/Unix hosting services for 31 partner
organizations. The report does not name the partners.
RELEVANT FINDINGS (paraphrased)
1. Application-to-server mapping (section 3.4.2)
SSC did not have sufficient information on which applications ran on which servers. Only about a third of applications on its Enterprise Control Desk list were mapped to servers. The report states that, as a result, SSC did not know which government applications could be affected by a server crash or a security vulnerability.
2. Asset tracking (section 3.4.1)
SSC's asset tracking relied on manual data entry across about 30 spreadsheets. Only 32% of partner survey respondents believed SSC's asset management for these services was effective.
3. Shared responsibility (Appendix A of the report)
The Treasury Board Secretariat sets hosting direction, SSC provides infrastructure and platform services, and partner departments manage their own cloud and data centre consumption.
4. Cloud migration (section 2.2)
One stated objective of the modernization work was preparing partner environments for migration to enterprise data centres or the cloud.
LIMITS OF THIS SOURCE
The evaluation covers Linux/Unix hosting only. It does not name Statistics Canada, Microsoft or the U.S. CLOUD Act, and it does not say where any department's data is stored. It is cited to show gaps in SSC's ability to track where government applications are hosted, which is relevant to the question of where Statistics Canada's survey data is held.