The group started out by talking about the extent to which the various organizations at the table had adopted cloud based services. Some have adopted it to a great extent while others have used it less. Challenges included the issues of safe harbor being struck down and dealing with the impact of data related to that along with employees in other countries. Geography plays a big role. Data classification was another key topic. Knowing what the data is and how to classify it and being able to make rules based on that. Certain things just can’t go to the cloud.
The topic of due care also arose. It’s important to validate the claims that your cloud providers are making in terms of were the data is and how it’s being stored. If you aren’t doing due care in terms of testing and validating, this can pose major problems for your organizations.