Which of the following aspects of IT governance BEST addresses the potential intellectual property implications of a cloud service provider having a database in another country?

Contract management ensures terms are met, but data management defines the actual policies and controls for IP within those contracts.

Continuity planning focuses on disaster recovery and uptime, not intellectual property rights or data ownership across borders.

Data management, within IT governance, defines how data is collected, stored, protected, and used throughout its lifecycle. It establishes policies and controls that specifically address data ownership, jurisdiction, and intellectual property rights, making it the most direct aspect to manage IP implications when databases are located in another country by a cloud service provider.

Security architecture protects data from unauthorized access, but data management defines the policies around data ownership and intellectual property itself.