Higher Authority evaluates D/A’s determination that
they have a requirement to Retain Some of the Data/ Information on an Internal System
These instances arise in many organizations when individuals or groups consider some
of the data/information with which they are responsible as sensitive enough to warrant not
being migrated to an available secure cloud offering as characterized and approved under current government regulation.
In these cases, the organization should review existing regulation and governing policies and discuss the data/information from a security, risk, and a technical perspective and then an appropriate Decision Authority should make a determination as to whether the data/information in question should indeed remain on an Internal System or that all or some of the data/information be migrated to an approved cloud offering.
Higher Authority Decision: Based on the decision, select the most accurate statement below.
Yes – Higher Authority has determined that there is a requirement for SOME of the data/information in question to remain on an Internal System