Governance capability

The Governance capability enables you to define and enforce business and regulatory policies for your cloud environment. Policies can include rules for your environment or risk definitions. A portion of your governance policies is embedded in other capabilities across your environment to ensure that you meet your requirements.

Stakeholders:

• Governance, Risk Management, and Compliance (Primary)

• Finance

• Security

• Central IT

Personas:

• Cloud Team - the team(s) who make cloud available to customers.

• Information Security Team - the members of the cloud team responsible for security in AWS.

• Finance Team - the team responsible for reporting, allocating, and forecasting cloud costs.

• Compliance Team - the team responsible for compliance.

• Procurement Team - the team responsible for procurement of services from the cloud service provider.

Scenarios:

• CF26 - S1: Cloud service provider relationship

• CF26 - S2: Operational standards

• CF26 - S3: Organizational cloud awareness

• CF26 - S4: Policy communication

• CF26 - S5: Governance at scale

• CF26 - S6: Compliance management

Topics

• Overview

• Establish the relationship with your cloud services provider

• Define how cloud services are adopted

• Get started with your cloud services provider

• Build cloud capability across your organization

• Respond to growth or change

• Industry-specific governance

• Security Assurance on AWS