信息技术-云计算-基于分类的云服务数据处理

[中文适用范围]： 本文件描述了基于ISO/IEC 19944数据分类法在云计算环境中的数据相关策略和实践的结构化表达框架；为基于数据子类别和分类处理数据提供指南；涵盖包括但不限于数据地理位置、数据跨境流动、数据访问和数据可移植性、数据使用、数据管理和数据治理的数据相关策略和实践的表达；描述了如何在涉及静止和传输中数据的行为准则中使用该框架，包括数据跨境转移和远程访问数据；为根据ISO/IEC 19944数据类别控制、访问和位置的数据处理挑战提供用例。本文件主要适用于云服务提供商、云服务客户（CSC）、云服务用户，但也适用于任何涉及基于分类法的云服务数据管理的个人或组织。 [外文原描述]： This document: — describes a framework for the structured expression of data-related policies and practices in the cloud computing environment, based on the data taxonomy in ISO/IEC 19944; — provides guidelines on application of the taxonomy for handling of data based on data subcategory and classification; — covers expression of data-related policies and practices including, but not limited to data geolocation, cross border flow of data, data access and data portability, data use, data management, and data governance; — describes how the framework can be used in codes of conduct for practices regarding data at rest and in transit, including cross border data transfer, as well as remote access to data; — provides use cases for data handling challenges, i.e. control, access and location of data according to ISO/IEC 19944 data categories. This document is applicable primarily to cloud service providers, cloud service customers (CSCs) and cloud service users, but also to any person or organization involved in legal, policy, technical or other implications of taxonomy-based data management in cloud services.