Issue link: https://cp.revolio.com/i/359333
6 | THE DATA CENTER JOURNAL www.datacenterjournal.com www.datacenterjournal.com Issue Business Decision Solutions Are the jurisdictional laws in the given location in sync with your corporate policies and your sovereign's data laws? (Typically applies when the laws are "less friendly" than your own sovereign's laws, potentially putting enterprise data and customer data at risk.) If the answer to that question is no, you may not want IT infrastructure in that location, or you may want to operate under tighter control with more robust security than you might otherwise deploy. On-premises or off- premises (a.k.a., any- premises) private cloud and End-to-end encryption to secure the data in transit Is your cloud provider capable of accommodating the laws of the countries in which you do business? (Typically applies when the location's laws are stricter than your own sovereign's laws, requiring higher levels of privacy protection, for example.) If the answer to that question is no, and you want to do business in that given location, you'll have to figure out how to comply with local laws. Colocation in a local data center or Any-premises private cloud Do any of the locations in which you do business require you to keep their citizens' data in-country? If the answer to that question is yes, and you want to do business in that given location, you have to figure out a way to keep the data in-country. Colocation in a local data center or Any-premises private cloud Are you prepared to protect enterprise data and government data even in the face of surveillance programs that you're not aware of? Without knowledge of the programs the government is running, it's impossible to make informed business decisions. So in the face of potential secret programs, preemptive measures may be necessary. Any-premises private cloud and End-to-end encryption to secure the data in transit Do you know, and are you comfortable with, what your cloud provider would do if the government of any of the countries in which your enterprise data is running or stored asked it to turn over your data or your encryption keys? There are many reasons an enterprise would decide to go to the public cloud. But there are risks that must be accounted for and mitigated; most public cloud providers do not provide the level of visibility and control that most enterprises require. Public cloud and Rigorous due diligence and You control the encryption keys or Any-premises private cloud A Framework for IT Infrastructure Decision Making in the Context of Data Sovereignty and Data Custody Issues