Cloud Security for Defense

Design a governance and risk management framework for using cloud services to handle highly sensitive information in strategic contexts. Address data classification, encryption, access controls, supply chain risk, multi-cloud and on-premises integration, incident response, and accountability across public and private partners. Include metrics to assess resilience and a decision model for when to keep data offline vs in cloud.