Higher Authority evaluates D/A’s determination that they have a requirement to Retain All Data/ Information on an Internal System
These instances arise in many organizations when individuals or groups consider
the data/information with which they are responsible as sensitive enough to
warrant not being migrated to an available secure cloud offering as characterized and approved under current government regulation.
In these cases, the organization should review existing regulation and governing policies and discuss the data/information from a security, risk, and a technical perspective and then an appropriate Decision Authority should make a determination as to whether the data/information should indeed remain on an Internal System or that all or some of the data/information be migrated to an approved cloud offering.
Higher Authority Decision: Based on the decision, select the most accurate statement below.