Exam CISM topic 1 question 834 discussion

How about B? GDPR and data sovereignty, anyone? The thing that says that you data must not leave country's borders, so if datacenter is on the other side of the world that would be a violation of regulatory requirements..?

Data classification involves categorizing data based on its sensitivity and importance to the organization. Before moving to a cloud-based model, it's crucial to understand the nature of the data that will be stored in the cloud. This classification helps in determining the appropriate level of security controls, access restrictions, and compliance requirements for each type of data. It lays the foundation for making informed decisions about how different types of data will be handled in the cloud environment.

I have to go A data classification. The reason being, when looking at the classification of your data you can see what can be moved to the cloud. Some data may be "classified" so high that you can't risk putting it in the cloud. Knowing the classification will also help in determining the level of protection data will need in the cloud as well. This will lead to better and more informed decision making.

Agree with Wello A.

classification should be done even before moving to the cloud, so this is something that should do with cloud

The first consideration when deciding to move to a cloud-based model should be data classification. Understanding the sensitivity and importance of your data will help determine the level of security and protection required in the cloud environment. By properly classifying your data, you can assess the appropriate security controls, encryption methods, access permissions, and compliance requirements needed to protect your data in the cloud. This initial step will lay the foundation for making informed decisions regarding the physical location of the data, storage in a shared environment, and ensuring the availability of the data.

D. availability of the data Ensuring that your data will be accessible and available when needed is a fundamental concern when transitioning to a cloud-based model. Once you've established the availability requirements, you can then address other considerations such as data classification, physical location, and storage in a shared environment, which may vary depending on your specific needs and regulatory requirements.

D. availability of the data

A. data classification

data classification (option A) should be the FIRST consideration when deciding to move to a cloud-based model. It provides the necessary foundation for making informed decisions about data storage, location, and availability in the cloud environment, ensuring that security and compliance requirements are appropriately addressed.