The limit to the use of the cloud is generally not technology, but policy, security, or regulatory.

• A. True
• B. False
• C. It is often policy or regulatory considerations rather than technology
• D. Only performance concerns limit usage

Answer: (C)

The key idea is that cloud adoption is often limited by governance, security, and regulatory constraints rather than by the technology itself. Cloud platforms can provide vast scalability and capabilities, but organizations must meet data privacy laws, industry regulations, and internal policies about who can access data, where it can be stored, how long it must be kept, and how audits and incident responses are handled. Security requirements—such as encryption standards, key management, and access controls—are typically driven by these policies and regulations, so they shape what can be moved to the cloud and under what controls. When rules demand data residency within a specific jurisdiction or mandate particular compliance regimes, those mandates can prevent cloud use even if the technology would otherwise meet the need. While performance concerns exist, they are usually solvable through architecture and SLAs; the prevailing gating factors tend to be policy and regulatory considerations, which is why that statement is the best fit.