While the content
of cloud policies varies, key areas typically include: (i) the
purpose of the cloud policy; (ii) a description
of the scope
of the cloud policy; (iii) the
actual procedures
of the
organization relating to cloud services, i.e., considerations and limitations; and (iv) compliance requirements for the employees / contractors
of the
organization, including potential sanctions.