Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

Question

Options

• ACloud process owners
• BInternal control function
• CLegal functions
• DCloud strategy owners

• A
  88% (14)
• B
  6% (1)
• D
  6% (1)

Explanation

Cloud process owners are the individuals accountable for the business processes that will be migrated to or supported by the cloud. They must be identified first because they define what is being moved, what the data is, what the regulatory requirements tied to those processes are, and what compliance obligations apply. Without knowing which processes and workloads are in scope, it is impossible to design a meaningful compliance program. Legal functions (C) and internal controls (B) are engaged based on the process inventory that cloud process owners define. Cloud strategy owners (D) are important but operate at a higher level of abstraction than the process-level detail needed to design controls.

No community discussion yet for this question.