A UK-based private hospital group with various levels of systems security considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing…

Public cloud alone does not meet the security requirements for sensitive healthcare data, which may be subject to UK GDPR and NHS compliance mandates requiring controlled data residency.

Hybrid cloud combines public cloud infrastructure for cost reduction and elastic workload flexibility with private or on-premises resources for sensitive patient data subject to regulatory requirements. This model allows a healthcare organization to reduce capital expenditure by shifting commodity workloads to public cloud while keeping regulated data on controlled infrastructure. It directly addresses both the CTO's cost goal and the hospital's varied security requirements.

On-premises infrastructure increases capital expenditure because the organization owns and maintains all hardware, directly contradicting the CTO's goal to reduce CapEx.

A private cloud reduces CapEx less than a hybrid approach and does not leverage the lower unit cost of public cloud for workloads that do not require strict data controls.