Data Classification and Inventory Across Cloud AssetsEncryption in Transit, at Rest, and in UseKey Management: HSMs, KMS, Rotation, and EscrowData Residency, Sovereignty, and Jurisdictional ComplianceBackup, Archival, and Disaster Recovery for DataDLP and Leak Surface ReductionConclusionRecommendations