What it means
Cloud data may appear in object storage, databases, analytics platforms, logs, snapshots, backups, message services, development environments, and metadata.
Why it matters
Unknown data cannot be governed reliably. Discovery must therefore connect to owners, access controls, retention, monitoring, and remediation rather than end as a report.
Practical focus
- Define practical classification categories and handling rules
- Scan both structured and unstructured cloud data
- Assign owners and investigate unknown repositories
- Use classification to drive access, encryption, retention, and monitoring
Common mistakes
- Scanning only production databases
- Classifying data without changing controls
- Treating labels as accurate forever
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: