search

CloudSecurityAlliance / CSA-Guidance

CSA Guidance
215 stars 101 forks source link

Domain 5 - Data Governance #31

Open leenewcombe opened 7 years ago

leenewcombe commented 7 years ago

I realise this domain is in outline form at the moment :)

A move towards cloud services can offer an opportunity to re-visit data ownership and governance. It's a good chance to adopt a defined information architecture and away from the fractured, heavily duplicated and poor quality data repositories you find in many enterprises. Perhaps worth exploring this as a side benefit of wider transformation relating to cloud adoption in this Domain?

pve commented 7 years ago

it might, but sounds quite a bit outside the scope of cloud computing and cloud security

leenewcombe commented 7 years ago

I tend to view information architecture in the same way as application architecture in the cloud context - if you just lift and shift then you're not going to get many of the benefits of a move to cloud. I'm not sure how you would really get the most from a move to cloud without re-visiting your information architecture and associated meta-data around access control and ownership/governance?

rmogull commented 7 years ago

I do like the concept of adjusting architectures as you migrate. I'll add something in but keep it high level.