 Chapter 5: Improving Security, Governance, and Cloud Reliability 49 requirements? For example, can your business share  data across international borders? These requirements  must be supported through technical controls, automation,  and strict governance of processes, data, and workflows.  Make sure that you have the ability to control how much  you’re spending for independent cloud services based on  financial and business requirements. Governance has a lot to do with assessing and managing risk.  If you’re going to hold a cloud provider (public, private, or  hybrid) partly accountable for your IT cloud services, you  need to consider risks. As you move into a cloud model, your governance team needs  to consider the following risks:  Are you assured that the infrastructure will continue to  support your service? What if one of the services you’re  using changes? These materials are the copyright of John Wiley & Sons, Inc. and any  dissemination, distribution, or unauthorized use is strictly prohibited. ✓ Interoperability:  Associated with developing a service  that may be composed of multiple services ✓ Performance and availability:  Include the level of availability and performance your business needs to be  successful ✓ Other information:  Include protection of intellectual  property ✓ Security:  Includes data integrity, confidentiality, and privacy ✓ Audit and compliance:  Include issues around data jurisdiction, data access control, and maintaining an  auditing trail ✓ Understanding the performance goals of the business:  If  you have specific performance demands, work with your  service provider to establish benchmarks based on business goals. You may have an uptime requirement  or a need to monitor who has access to services. Your  cloud provider needs to be able to support these goals  and help you optimize business performance. Risks worth noting