Higher Authority evaluates D/A’s determination that
they have a requirement to Retain Some of the Data/ Information on an Internal System
These instances arise in many organizations when individuals or groups consider some
of the data/information with which they are responsible as sensitive enough to warrant not
being migrated to an available secure cloud offering as characterized and approved under current government regulation.
​
In these cases, the organization should review existing regulation and governing policies and discuss the data/information from a security, risk, and a technical perspective and then an appropriate Decision Authority should make a determination as to whether the data/information in question should indeed remain on an Internal System or that all or some of the data/information be migrated to an approved cloud offering.
Higher Authority Decision: Based on the decision, select the most accurate statement below.
​
Yes – Higher Authority has determined that there is a requirement for SOME of the data/information in question to remain on an Internal System