Newcastle City Council switches to Azul for Java security

Newcastle City Council has recently implemented Azul Platform Core to address major security vulnerabilities in its Java-based applications. The move, involving an OpenJDK-based alternative to Oracle Java, comes after an audit revealed that more than 80% of the council's IT security vulnerabilities were related to its existing Oracle JDK 8 setup, which lost free quarterly security patches following Oracle's 2019 licensing changes.

Newcastle City Council is responsible for providing municipal services to over 300,000 residents, with critical applications for financial management, housing, and benefits running on Java version 8. However, the council's annual security audits identified the Java runtime as a significant risk, necessitating a swift and effective response to maintain the safety and performance of its systems.

"Through our strategic partnership with Azul, we significantly reduced our security risk level with our Java applications and Java-based infrastructure, which certainly helps me sleep better at night," commented Jenny Nelson, the council's head of ICT & Digital.

The council considered several options to enhance its cybersecurity stance, including migrating away from Java entirely. This option was quickly abandoned due to the anticipated year-long process and prohibitive costs, which would inevitably lead to unacceptable downtime for essential government services. Other alternatives, such as a move to a free distribution of OpenJDK, lacked the comprehensive support required to secure and maintain the council’s extensive Java estate.

By choosing Azul Platform Core, Newcastle City Council was able to secure critical patch updates and support features necessary for its IT infrastructure. "Our Java estate is now consistent, standardised, easier to maintain, and has brought a level of simplicity that’s a huge benefit to our organisation," Jenny Nelson added.

The transition saw Azul Platform Core rolled out to over 1,000 employees without any disruption to performance or service levels. This comprehensive rollout ensured that the council could achieve its objective of maintaining a fully supported and secure Java application estate.

James Johnston, vice president of EMEA at Azul, stated, "We are proud to support Newcastle City Council in its mission to secure critical municipal services by helping to eliminate over 80% of NCC’s IT security risks. The council’s successful implementation of Azul Platform Core is a testament to our unwavering commitment to help customers maintain the integrity and performance of their critical Java applications, while advancing their overall security posture and without impacting service levels or performance."

In addition to achieving its primary goal of mitigating Java-related security risks, the council's switch to Azul Platform Core has ensured compliance with the United Kingdom’s Public Services Network (PSN) requirements, further bolstering the safety and reliability of its IT environment. This strategic decision highlights the council's commitment to maintaining high-security standards and operational efficiency.