An entity plans and manages its transition to a CSP, evaluating the provider's technical support and any tools or guidance that ease the move. Before planning, it reviews its governance and data requirements and constraints: it performs legal due diligence to confirm no legal obligation, QCB regulation, agreement or data use agreement restricts transferring data to third parties even when they are service providers; checks that any consent the 2016 personal data privacy law (Law No. 13) requires has been obtained before data goes to a third party; reviews the legal and regulatory requirements, its contractual obligations and its corporate policies and updates policies and standards where needed to allow third-party handling of data; extends its data governance policies and practices to data processed in the cloud; and reviews whether its existing data and technical architectures suit a cloud environment before migrating.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.