Cloud Governance After UTS Refresh

Explain the basic concepts of Cloud Security and Cloud Governance.

• Cloud Security involves securing data and applications stored in the cloud, while Cloud Governance entails regulation and control over the use of cloud within an organization.
• Cloud Governance involves securing data and applications stored in the cloud, while Cloud Security entails regulation and control over the use of cloud within an organization.
• Both are the same concept.
• There is no connection between Cloud Security and Cloud Governance.

Explain the relationship between Enterprise Risk Management and Cloud.

• Enterprise Risk Management is not related to Cloud.
• Cloud is part of Enterprise Risk Management.
• Enterprise Risk Management can help identify and manage risks associated with the use of Cloud.
• Cloud Governance manages risks associated with Cloud.

Which of these is Service Models?

• Service models: SaaS, PaaS, IaaS; Cloud Security: Security of cloud resources; Virtualization: Use of physical servers to run multiple operating systems or applications.
• Service models: SaaS, PaaS, IaaS; Cloud Security: Security of data in the cloud; Virtualization: Use of physical servers to run one operating system or application.
• Service models: SaaS, PaaS, IaaS; Cloud Security: Security of cloud resources; Virtualization: Use of physical servers to run multiple operating systems or applications.
• Service models: SaaS, PaaS, DaaS; Cloud Security: Security of cloud resources; Virtualization: Use of physical servers to run multiple operating systems or applications.

Explain what Business Continuity Planning and Disaster Recovery (BCP/DR) are? Provide examples in an industry.

• Business Continuity Planning involves planning for ongoing operations during disruptive events, while Disaster Recovery focuses on restoring systems after a disaster. Example: A financial institution implementing BCP to ensure customer service during a power outage.
• Disaster Recovery involves planning for ongoing operations during disruptive events, while Business Continuity Planning focuses on restoring systems after a disaster. Example: A hospital implementing DR to recover patient records after a cyber attack.
• Both Business Continuity Planning and Disaster Recovery focus on restoring systems after a disaster. Example: An e-commerce company implementing BCP/DR to maintain sales during a website outage.
• Business Continuity Planning and Disaster Recovery are interchangeable terms for the same concept. Example: An IT firm implementing BCP/DR to handle data loss incidents.

Explain what RTO and RPO are, and their differences. Describe RTO and RPO in the same industry as the example above.

• RTO (Recovery Time Objective) is the maximum tolerable downtime, while RPO (Recovery Point Objective) is the maximum tolerable data loss. Example: In the financial industry, RTO could be one hour, and RPO could be one day.
• RTO (Recovery Time Objective) is the maximum tolerable data loss, while RPO (Recovery Point Objective) is the maximum tolerable downtime. Example: In the healthcare industry, RTO could be one day, and RPO could be one hour.
• RTO (Recovery Time Objective) is the maximum tolerable downtime, while RPO (Recovery Point Objective) is the maximum tolerable data loss. Example: In the financial industry, RTO could be one day, and RPO could be one hour.
• RTO (Recovery Time Objective) and RPO (Recovery Point Objective) have the same meaning. Example: In the retail industry, both RTO and RPO could be one week.

What are the categories of cloud vendors?

• IaaS, PaaS, SaaS.
• Amazon Web Services, Google Cloud Platform, Microsoft Azure.
• Oracle Cloud, IBM Cloud, Alibaba Cloud.
• Public, private, hybrid.

What are the criteria for selecting a cloud vendor?

• Network speed, data center locations, uptime guarantee.
• Service models, virtualization, cloud governance.
• Industry experience, customer support, scalability.
• Cost, reliability, security.

What is a Cyber Attack? How do we deal with a cyber attack?

• A cyber attack is an attempt to gain unauthorized access to computer systems or networks for malicious purposes. It can be dealt with by implementing strong passwords and firewalls.
• A cyber attack is an attempt to gain authorized access to computer systems or networks for beneficial purposes. It can be dealt with by educating employees about cybersecurity best practices.
• A cyber attack is an attempt to gain unauthorized access to computer systems or networks for malicious purposes. It can be dealt with by implementing security measures such as intrusion detection systems and regular software updates.
• A cyber attack is an attempt to disrupt internet services for political reasons. It can be dealt with by increasing government regulation of the internet.

Explain Cloud Strategic Plan and its framework.

• A Cloud Strategic Plan outlines an organization's goals and objectives for adopting cloud technology, along with a framework for implementation and management. Example frameworks include NIST and ISO standards.
• A Cloud Strategic Plan is a document that outlines the technical specifications of a cloud infrastructure. Its framework includes servers, storage, and networking components.
• A Cloud Strategic Plan is a budgeting document that allocates funds for cloud services. Its framework includes cost projections and ROI calculations.
• A Cloud Strategic Plan is a marketing strategy for cloud vendors. Its framework includes promotional campaigns and sales targets.

What is risk mitigation and explain the potential risks we may encounter when using cloud computing? Also, describe how we can identify these issues using the Cloud Incident Response Framework.

• Risk mitigation involves reducing the impact of potential risks. Risks in cloud computing include data breaches, service outages, and compliance violations. The Cloud Incident Response Framework helps identify these issues through continuous monitoring and rapid incident response protocols.
• Risk mitigation involves accepting potential risks without taking any action. Risks in cloud computing include increased efficiency, cost savings, and scalability. The Cloud Incident Response Framework helps identify these opportunities through proactive risk assessment and strategic planning.
• Risk mitigation involves transferring potential risks to a third party. Risks in cloud computing include data sovereignty issues, vendor lock-in, and loss of control over infrastructure. The Cloud Incident Response Framework helps identify these concerns through contractual agreements and service level agreements.
• Risk mitigation involves ignoring potential risks and hoping they don't occur. Risks in cloud computing include improved agility, global reach, and innovation. The Cloud Incident Response Framework helps identify these benefits through user feedback and performance metrics.