利用治理控制构建数据保护策略.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.C O P 3 5 3Building your Data Protection Strategy with Governance ControlsAdam BoswellSr.SDMAWS OrganizationsRamesh RajanSr.Solution ArchitectAWS 2025,Amazon Web Ser

2、vices,Inc.or its affiliates.All rights reserved.Data protection challenges in the cloud Multi-account AWS environments present governance complexity,risk exposure and operational challenges for organizational data protection.Multi account complexityDecentralized ownershipInconsistent policy administ

3、rationPolicy driftOver privileged roles Data residency challenges Differing needs of different personas 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Your data protection personas“Empowering teams to protect data through defined roles and responsibilities”2025,Amazon Web Service

4、s,Inc.or its affiliates.All rights reserved.Data owners(Business teams)“Define data governance requirements”Data classification and inventoryAccess control And authorizationCompliance and risk managementSecurity controls definitions 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.

5、Data custodians(Implementation teams)“Deploy and maintain security controls at scale through Organizations”Implementation of controlsOperational managementSecurity monitoring and responseCompliance enforcement 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Auditors(Compliance Tea

6、ms)“Verify protection through comprehensive monitoring and Organizations integration”Assessment of controlsMonitoring and reportingRisk management 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.What we need to solve the needs of different personas?Centralized Data Protection Stra