An organization is moving IT functions like data storage or office apps to public cloud. The GDPR would govern as it regulates data privacy and protection. Implementing encryption protects cloud data from unauthorized access. A network diagram shows encryption placed between the cloud and user access points, encrypting data in transit. Encryption enables compliance by protecting personal data as required by GDPR.

1. Assume an organization is planning to move a significant IT function, such as data storage or
office productivity applications, to a public cloud computing service provider. Identify one of the
regulatory rules above as one that would likely govern or be important to the organization and a
security control that is appropriate for achieving compliance with it. Make sure to do the following:
Explain how your security control protects your cloud data. Create a logical network diagram that
indicates the appropriate placement of your security control. Explain how your security control
enables regulatory compliance.