Cloud data security focuses on protecting confidentiality, integrity, and availability of data stored in the cloud.

Encryption is a core control for cloud data security and may be used to support requirements such as data sovereignty, compliance, and trust.

• Cloud provider-managed encryption
• Customer-managed encryption keys
• Customer-managed hardware security modules (HSM)
• Bring-your-own-key (BYOK) models
• Third-party encryption tools

• Internal data and sensitive data require stronger protection
• Financial, HR, legal, and intellectual property data are especially critical
• Trust, agility, and control expectations vary based on customer preferences

The goal is to ensure that data remains protected regardless of where it resides while allowing organizations to balance agility, governance, and trust.