A global company is implementing a new cloud-based customer support platform. The project manager identifies that the platform will store customer data from various regions, each with different data residency and privacy laws (e.g., GDPR in Europe, CCPA in California). Which aspect of cloud governance is MOST critical to address to ensure legal compliance?
- AEnsuring the platform supports a wide range of browser types and versions.
- BImplementing a robust disaster recovery plan for the cloud platform.
- CNegotiating a service level agreement (SLA) focused solely on uptime guarantees.
- DEstablishing data classification policies and geographical data storage rules.
Show answer & explanationAnswer & explanation
Correct answer: D. Establishing data classification policies and geographical data storage rules.
The scenario highlights 'customer data from various regions, each with different data residency and privacy laws.' Data classification (identifying what data is sensitive and subject to specific laws) and geographical data storage rules (where data must legally reside) are direct and critical components of cloud governance necessary to comply with diverse international data residency and privacy regulations.
Why the other options are wrong
- A. Browser compatibility is a functional requirement, not directly related to data residency or privacy compliance.
- B. Disaster recovery is for business continuity, not specifically for addressing data residency or privacy laws.
- C. An SLA focused solely on uptime doesn't address the legal and privacy aspects of data storage and processing.
Cloud Governance
The set of rules, policies, and processes that ensure the effective and secure use of cloud resources, aligning with organizational objectives and regulatory requirements.
- Includes financial, operational, security, and compliance aspects.
- Crucial for managing risks and ensuring regulatory adherence in the cloud.
- Addresses data residency, access control, and auditability.
Memory trick: Cloud Governance: Cost, Security, Compliance, Operations.