Implementing Cloud Governance

Name: Implementing Cloud Governance
Author: Alison Gunnels

Learn how to implement cloud governance

Preview the first lesson free — get full access to all 6 lessons.

Course: On-Demand

In this lesson, we will introduce you to the concept of governance and how it applies to data and vendor management in the cloud. Governance is both a structure and an activity, and both are necessary for well-managed cloud computing. A governance structure is a set of policies, procedures and responsibilities that control how organizations use cloud computing. Governance activity is the application of that structure to perform oversight. Governance for cloud computing defines how an organization implements its services, includes the creation of structure, selection, and management of vendors. Definitions of acceptable use and application of legal and regulatory requirements. Governance programs for cloud computing Ensure that an organization makes consistent, logical decisions that align with its goals. Governance allows standardization of cloud implementation, lowering costs, and easing the burden of information security activities. Ideally, an organization implements cloud governance before purchasing cloud services. Cloud service providers require contractual agreements to access their services, whether through a blanket published user agreement or an individually negotiated document. Vendor choice and contractual language that seems acceptable to the end user or even the IT department may not align with the organization's goals. This can be avoided by administering governance prior to service. Although each organization defines the appropriate structure for its own governance, cloud computing governance works best when it's centralized. Security, functional and technical requirements are most often defined at an enterprise level. A central body can monitor and control these aspects and identify outliers or duplication of efforts. A key part of cloud governance is the creation of policies and procedures. It's important for an organization to publish guidelines for selecting cloud vendors and for identifying characteristics of acceptable use. Because cloud services may be provided from multiple locations. Cloud governance includes definitions of which data can be used and where the data can be stored, accessed and processed. This can limit the cloud services or providers chosen for an application and help define roles and responsibilities for each aspect of cloud services. Roles and responsibilities for cloud services are defined across an organization's purchasing management and operational levels. They are assigned for security oversight and compliance. Vendor Management. Acceptable data usage and technical operations and decision making. Effective cloud governance requires contract management because most organizations hire cloud services from a third party. The use of third party services avoids the capital investment in cloud infrastructure and the ongoing costs of hiring cloud operations experts. However, the use of third party cloud services introduces concerns that are unusual for contracts with other technical services or product providers. Contracts for cloud services include usual provisions for maintenance, end of life service level and costs. But they also have data access and location limitations. Security standards and audit standards that are not generally included in other contracts. It's important for cloud governance to include due care and due diligence when assessing security responsibilities. Due care is executed by organizational management when they have defined the internal and external requirements for security and oversight. Due diligence is a responsibility of the security teams to perform security functions thoroughly by persons with an appropriate level of knowledge. Neither due diligence nor due care requires perfection. Instead, it requires that all responsibilities are performed with adequate attention and skill.

Intermediate Provider : Alison Gunnels 6 Lessons · 25m in Arabic, English

Course Description

Engaging with a cloud provider has a lifecycle. It begins when an organization first considers a provider and ends when there is no further relationship. Engagement is required throughout the relationship lifecycle, from first contact until data and services are removed from the cloud provider’s environment. To ensure a successful relationship, an organization needs to carefully evaluate a cloud provider’s services, infrastructure, and provisions for data security. What are some of the considerations that need to be made when selecting a cloud provider? And what are your responsibilities when hosting data on a cloud provider’s platform?

In Implementing Cloud Governance, you will be introduced to the concept of cloud governance and how it applies to data and vendor management in the cloud. You’ll learn about managing risk in the cloud and how proper management reduces the risk of data mismanagement, poor vendor relationships, legal concerns, and lax information security. You’ll also learn about the cloud shared responsibility model, selecting a cloud provider, and managing your relationship with a cloud provider.

What You'll Learn

Understand the concept of cloud governance and how it applies to data and vendor management in the cloud
Describe the cloud shared responsibility model
Manage risk in the cloud to reduce data mismanagement, poor vendor relationships, legal concerns, and lax information security
Select a cloud provider by evaluating their services, infrastructure, and data security provisions
Manage your ongoing relationship with a cloud provider across the engagement lifecycle
Define applicable governance for an organization's use of cloud services

Key Takeaways

Engaging with a cloud provider follows a lifecycle that runs from first contact until data and services are removed from the provider's environment.
Proper cloud risk management reduces the risk of data mismanagement, poor vendor relationships, legal concerns, and lax information security.
Selecting a cloud provider requires carefully evaluating the provider's services, infrastructure, and provisions for data security.
The shared responsibility model defines what an organization is responsible for when hosting data on a cloud provider's platform.
Cloud governance applies to both data management and vendor management in the cloud.

Frequently Asked Questions

What does this course cover?

It introduces cloud governance and how it applies to data and vendor management in the cloud, including managing risk in the cloud, the cloud shared responsibility model, selecting a cloud provider, and managing your relationship with a cloud provider.

What skills will I gain from this course?

The course develops skills in Cloud Administration, Cloud Governance, Cloud Management, Data Governance, Governance Risk Management and Compliance, and IT Governance.

What topics are taught in the lessons?

Lessons cover Governance Definitions and Concepts, Organizational Risk Management, Defining Applicable Governance, the Shared Responsibility Model, Vendor Selection, and Vendor Management.

Why is governing the cloud provider relationship important?

Engagement is required throughout the relationship lifecycle, and proper management reduces the risk of data mismanagement, poor vendor relationships, legal concerns, and lax information security.