Cloud Services For Dummies, IBM Limited Edition  48 Speak to your cloud provider regarding what data controls it  provides. In addition, develop and publish a consistent set of  rules and policies regarding the creation, capture, management,  transmission, storage, and deletion of confidential and business- critical data. Make sure that your provider adheres to data  location requirements dictated by certain governments. Data  is the lifeblood of your organization, so you don’t want it to be  compromised in any way. Not only do you want to save your  data but also restore that data to ensure that no data is lost. Hand in hand with a security strategy needs to be a governance  strategy — a way to ensure accountability by all parties  involved in the cloud deployment. Basically, governance is  about applying policies related to using services. Governance  incorporates the organizing principles and rules that determine  how an organization should behave when leveraging cloud  services. These policies determine who is accountable for  what actions. Cloud governance is a shared responsibility  between the users of cloud services and the cloud provider.  Understanding the boundaries of responsibilities and defining an appropriate governance strategy for your company  requires careful balance. Of course, cloud governance can be tricky. IT governance  is hard enough. Cloud governance requires governing your  own infrastructure as well as infrastructure you don’t totally  control. A successful governance strategy in a cloud world  requires a negotiated agreement between you and your cloud  providers(s). Generally, several goals are involved in cloud  governance, including risk and monitoring performance. Your  governance strategy needs to be supported in two ways: These materials are the copyright of John Wiley & Sons, Inc. and any  dissemination, distribution, or unauthorized use is strictly prohibited. ✓ Understanding the compliance and risk measures the  business must follow:  What does your business require  to meet IT, corporate, industry, and government Establishing a Cloud Governance Strategy Governance issues in the cloud