By employing multiple cloud providers for the same workloads, the university reduces reliance on a single vendor and mitigates risks like outages or vendor-specific vulnerabilities.

A qualitative risk analysis uses descriptive scales (e.g., high, medium, low) to prioritize risks based on their likelihood and impact, rather than numeric calculations.

Monitoring outbound traffic is essential for detecting unauthorized data exfiltration from a system.
A new vulnerability that allows malware to move data unauthorizedly would typically attempt to send this data out of the network. By monitoring outbound traffic, security tools can detect unusual data transfers, trigger alerts, and help prevent the exfiltration of sensitive information.