+OPS.2.2.A1 Drawing Up a Strategy for Cloud Usage [Process Owner, Top Management, Data Protection Officer] (B)

OPS.2.2.A1 Drawing Up a Strategy for Cloud Usage [Process Owner, Top Management, Data Protection Officer] (B)

A strategy MUST be established for cloud usage. It MUST define the objectives, opportunities, and risks that a given organisation associates with cloud use. In addition, the legal and organisational framework conditions and the technical requirements arising from the use of cloud services MUST be examined. The results of this investigation MUST be documented in a feasibility study.

The services to be purchased from a cloud service provider in the future MUST be documented along with the chosen delivery model. In addition, it MUST be ensured that all fundamental aspects of technical and organisational security are sufficiently considered in the planning phase for cloud use.

A rough individual security analysis SHOULD be carried out for the planned cloud service. This SHOULD be repeated if technical and organisational framework conditions change significantly. For larger cloud projects, a roadmap SHOULD also be developed to determine when and how a cloud service will be deployed.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations