Cloud Data Security

Cloud data security focuses on protecting confidentiality, integrity, and availability of data stored in the cloud.

Encryption and Data Sovereignty

Encryption is a core control for cloud data security and may be used to support requirements such as data sovereignty, compliance, and trust.

Key Management Models

Cloud provider-managed encryption
Customer-managed encryption keys
Customer-managed hardware security modules (HSM)
Bring-your-own-key (BYOK) models
Third-party encryption tools

Key Considerations

Internal data and sensitive data require stronger protection
Financial, HR, legal, and intellectual property data are especially critical
Trust, agility, and control expectations vary based on customer preferences

Security Objective

The goal is to ensure that data remains protected regardless of where it resides while allowing organizations to balance agility, governance, and trust.