Internship← Cloud Security learning pathCloud Security · Module 8 of 10
Compliance and governance
Meet regulations and organisational rules.
📖 Key ideas
- Standards: ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, India's DPDP Act.
- Data residency rules may require data in specific regions.
- Use organisation policies (SCPs, Azure Policy, Org Policy) as guardrails.
- Tag resources for ownership and cost.
- Document controls and keep evidence for audits.
💡 Real-life example: Governance is the rulebook of a housing society: everyone follows the same rules, audits check them.
ISO 27001Information security management standard
Data residencyWhere data must be stored
GuardrailPreventive organisational policy
Audit evidenceProof controls are working