Higher Authority evaluates D/A’s determination that they have a requirement to Retain All Data/ Information on an Internal System
These instances arise in many organizations when individuals or groups consider
the data/information with which they are responsible as sensitive enough to
warrant not being migrated to an available secure cloud offering as characterized and approved under current government regulation.
​
In these cases, the organization should review existing regulation and governing policies and discuss the data/information from a security, risk, and a technical perspective and then an appropriate Decision Authority should make a determination as to whether the data/information should indeed remain on an Internal System or that all or some of the data/information be migrated to an approved cloud offering.
​
Higher Authority Decision: Based on the decision, select the most accurate statement below.