DOMAIN 2 - THE EFFECTS OF SERVICE MODEL AND DEPLOYMENT MODEL

Question 1

presents the most critical example of the need
for a negotiated contract. Such a contract will protect the ability to govern or validate risk as it relates to data stored, processed, and transmitted with and in the application.

Answer 1

SaaS

Question 2

the level of detail that is available (and the consequential ability to self-manage governance and risk issues) increases. The likelihood of a fully negotiated contract is likely lower here than with either of the other service models.

Answer 2

PaaS

Question 3

represents the closest that Cloud comes to a traditional data center (or even a traditional outsourced managed
data center), and the good news is that the vast majority of existing governance and risk management activities that organizations have already built and utilize are directly transferable.

Answer 3

IaaS

Question 4

Cloud customers have a reduced ability to govern operations in a public cloud since the provider is responsible for the management and governance
of their infrastructure, employees, and everything else. The customers also often have reduced ability to negotiate contracts, which impacts how they
extend their governance model into the cloud.

Answer 4

PUBLIC

Question 5

If an organization allows a third party to own
and/or manage cloud (which is very common), this is similar to how governance affects any outsourced provider. There will be shared responsibilities with obligations that are defined in the contract.

Answer 5

PRIVATE

Question 6

the governance strategy must consider the minimum common set of controls comprised of the Cloud Service Provider’s contract and the organization’s internal governance agreements. The cloud user is connecting either two cloud environments or a cloud environment and a data center.

Answer 6

HYBRID AND COMMUNITY