content_image/779219.jpg
requirements? For example, can your business share data across international borders? These requirements must be supported through technical controls, automation, and strict governance of processes, data, and workflows. Make sure that you have the ability to control how much you’re spending for independent cloud services based on financial and business requirements. 

✓ Understanding the performance goals of the business:  If you have specific performance demands, work with your service provider to establish benchmarks based on business goals. You may have an uptime requirement or a need to monitor who has access to services. Your cloud provider needs to be able to support these goals and help you optimize business performance. 

<img src='content_image/779219.jpg'>

## Risks worth noting 

Governance has a lot to do with assessing and managing risk. If you’re going to hold a cloud provider (public, private, or hybrid) partly accountable for your IT cloud services, you need to consider risks. 

As you move into a cloud model, your governance team needs to consider the following risks: 

✓ Audit and compliance:  Include issues around data jurisdiction, data access control, and maintaining an auditing trail 

✓ Security:  Includes data integrity, confidentiality, and privacy 

✓ Other information:  Include protection of intellectual property 

✓ Performance and availability:  Include the level of availability and performance your business needs to be successful 

✓ Interoperability:  Associated with developing a service that may be composed of multiple services 

 Are you assured that the infrastructure will continue to support your service? What if one of the services you’re using changes? 

