Cloud Governance and Strategies - Security Guidance for Critical Areas of Focus in Cloud Computing v5

This CCSKv5 chapter explores the criticality of governance in the cloud and how cloud computing transforms traditional governance practices. It covers the corporate cloud organizational model, the role of a Cloud Center of Excellence (CCoE), and the governance hierarchy. The chapter also discusses foundational actions such as data/asset classification and user/entity cataloging, as well as regulatory, legal, and risk-based requirements. Additionally, it introduces key frameworks, policies, and strategies, including the Shared Security Responsibility Model (SSRM), DevOps, Zero Trust, and the use of AI for cloud security.