3. What is your approach to governance, risk management, and compliance?
This area of questioning is particularly important if the prospective client is in a highly compliant vertical such as healthcare or financial services. These prospects will want to know what kind of approach you take towards governance and risk management. They will also ask what your requirements are for compliance and whether they match up with their own requirements, and the requirements of their end-users. It’s not enough to tell prospects that you meet these compliance requirements – be prepared to prove it with audit results and supporting documents. These prospects will want to know how you maintain compliance, and who owns the data in the cloud.
This area of questioning is particularly important if the prospective client is in a highly compliant vertical such as healthcare or financial services. These prospects will want to know what kind of approach you take towards governance and risk management. They will also ask what your requirements are for compliance and whether they match up with their own requirements, and the requirements of their end-users. It’s not enough to tell prospects that you meet these compliance requirements – be prepared to prove it with audit results and supporting documents. These prospects will want to know how you maintain compliance, and who owns the data in the cloud.
