Skip to content

ACCA Strategic Professional · Strategic Business Leader · Enabling success: disruptive technologies

Brevik Health, a private hospital group, holds sensitive patient records subject to strict regulation. It also wants to use elastic public cloud capacity for analysing anonymised data during seasonal peaks. Which deployment approach best reflects this combined need and what is the key governance implication?

A hybrid cloud fits best, keeping sensitive patient records in a private environment while using public capacity for anonymised analytics. The board remains accountable for data classification and workload placement, because regulatory responsibility for data cannot be transferred to the cloud provider.

  1. APublic cloud only; governance risk is transferred wholly to the provider
  2. BHybrid cloud; the board must keep accountability for data classification and where each workload sitsCorrect
  3. CPrivate cloud only; elasticity benefits cannot be obtained
  4. DCommunity cloud; the other members take responsibility for compliance

Explanation

Keeping regulated records in a private environment and bursting anonymised analytics to a public cloud is a hybrid model. Accountability for data protection cannot be outsourced, so the board must govern classification and placement. Public-only wrongly assumes risk transfer.

Did you get it right without looking?

One question tells you little. A timed set on Enabling success: disruptive technologies shows your real accuracy, how long you take and where you lose marks.

More Enabling success: disruptive technologies questions