Summary

This chapter equipped you with a comprehensive understanding of the legal intricacies and risks surrounding cloud computing. You explored conflicting international legislation, eDiscovery standards, and risk management strategies, building a strong foundation for navigating the legal landscape of cloud environments. The chapter highlighted the differentiation of roles in data handling, guided you through regulatory transparency requirements, and presented diverse risk treatment approaches. It culminated with an in-depth exploration of outsourcing and cloud contract design, addressing your business requirements, vendor management considerations, and critical aspects of contract management. Finally, the inclusion of supply-chain management principles, guided by ISO/IEC 27036, ensured you have a holistic view of legal and risk considerations for effective cloud governance.

In the next chapter, you’ll learn about privacy regulations and country-specific legislations concerning...