Free practice · matching · medium
Practice
Match cloud risks to controls
Match each cloud risk to the control that most directly reduces it.
Cloud access lifecycle
Every shared link and connected app needs an owner and an end state
- PurposeName the approved collaboration need
- RecipientChoose specific people or groups
- PermissionGrant view or edit only as needed
- ExpirationSet an end date or review point
- ReviewInspect guests, apps, links, and owners
- RecoverUse approved version and backup paths
Specific recipients, least privilege, expiration, guest review, connected-app control, and recovery planning prevent access from becoming permanent by accident.