A .R.T.I.E. is planning to deploy some of their applications in a public cloud. A major concern is how to share and protect data off premises. Also…

Control Mechanism Selection:

For A .R.T.I.E.'s scenario, where the concern is about sharing and protecting data off-premises and

ensuring that data can be used in decision-making without exposing it to unauthorized access, the

most suitable control mechanism would be:

A . Proactive control mechanism

Proactive control mechanisms are designed to prevent security incidents before they occur. They

include measures such as strong authentication, encryption, and access controls, which align with A

.R.T.I.E.'s requirements for secure migration to the public cloud and maintaining data confidentiality

during decision-making processes1234.

Data Encryption: Encrypting data at rest and in transit ensures that even if data is intercepted or

accessed by unauthorized individuals, it remains unreadable and secure2.

Access Control: Implementing robust access control measures, such as role-based access control

(RBAC) and multi-factor authentication (MFA), restricts data access to authorized personnel only34.

Firewalls and Network Security: Deploying firewalls and other network security measures helps to

protect the cloud environment from unauthorized access and potential breaches2.

Security Monitoring: Continuous monitoring of the cloud environment allows for the early detection

of potential security threats and vulnerabilities2.

Security Patching and Upgrades: Regularly updating and patching systems ensures that security

measures are up-to-date and can defend against the latest threats2.

These proactive controls are essential for A .R.T.I.E. as they provide a comprehensive approach to

securing data in the public cloud, align with the Dell Security Foundations Achievement’s focus on

security hardening, and support the Zero Trust model, which assumes no implicit trust and verifies

each request as though it originates from an open network5.