What it means
Different providers use different policy models, service boundaries, logs, capabilities, and terminology. Consistency should focus on required outcomes while preserving provider-native strengths.
Why it matters
Using multiple providers can reduce some concentration risk but also increases integration, skills, visibility, and governance complexity.
Practical focus
- Define a common control and evidence model
- Federate identity while limiting cross-cloud privilege
- Normalize only the telemetry needed for shared detection
- Document provider-specific exceptions and dependencies
Common mistakes
- Forcing every provider into one lowest-common-denominator design
- Assuming multiple clouds automatically provide portability
- Buying overlapping tools without an operating model
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: