本文件: -基于ISO/IEC 19944中的数据分类法，描述了云计算环境中数据相关策略和实践的结构化表达框架提供基于数据子类别和分类处理数据的分类法应用指南；-涵盖数据相关政策和实践的表述，包括但不限于数据地理位置、跨境数据流、数据访问和数据可移植性、数据使用、数据管理和数据治理描述了如何在行为准则中使用该框架，以获取有关静止和传输中数据的实践，包括跨境数据传输以及远程数据访问；-提供数据处理挑战的用例，即根据ISO/IEC 19944数据类别控制、访问和定位数据。 本文档主要适用于云服务提供商、云服务客户（CSC）和云服务用户，也适用于涉及云服务中基于分类的数据管理的法律、政策、技术或其他含义的任何个人或组织。交叉引用:ISO/IEC 19944ISO/IEC 17788ISO/IEC 38500:2015ISO/IEC 27001:2013ISO 24534-5:2011ISO/IEC 27017:2015ISO/IEC 19941:2017ISO/IEC 27000:2018BS 10010:2017ISO/IEC 38505-1:2017ISO/IEC/TR 38505-2购买本文件时提供的所有现行修订件均包括在内。

This document: — describes a framework for the structured expression of data-related policies and practices in the cloud computing environment, based on the data taxonomy in ISO/IEC 19944;— provides guidelines on application of the taxonomy for handling of data based on data subcategory and classification;— covers expression of data-related policies and practices including, but not limited to data geolocation, cross border flow of data, data access and data portability, data use, data management, and data governance;— describes how the framework can be used in codes of conduct for practices regarding data at rest and in transit, including cross border data transfer, as well as remote access to data;— provides use cases for data handling challenges, i.e. control, access and location of data according to ISO/IEC 19944 data categories. This document is applicable primarily to cloud service providers, cloud service customers (CSCs) and cloud service users, but also to any person or organization involved in legal, policy, technical or other implications of taxonomy-based data management in cloud services.Cross References:ISO/IEC 19944ISO/IEC 17788ISO/IEC 38500:2015ISO/IEC 27001:2013ISO 24534-5:2011ISO/IEC 27017:2015ISO/IEC 19941:2017ISO/IEC 27000:2018BS 10010:2017ISO/IEC 38505-1:2017ISO/IEC/TR 38505-2All current amendments available at time of purchase are included with the purchase of this document.