An enterprise code of ethics is a set of principles and values that guide the behavior and decision-making of the organization and its members. It can help to incorporate desired organizational behaviors into the IT governance framework by establishing a common understanding and expectation of what is acceptable and unacceptable, and by promoting a culture of integrity, accountability, and responsibility. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 17.

Data storage and transmission policies are documents that define the rules and guidelines for how data is stored, accessed, shared, and transmitted within and outside an organization. Data storage and transmission policies can help to ensure the security, privacy, compliance, and quality of the data, as well as to prevent data loss, leakage, or breach12.
If an enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities, one of the IT strategic actions that should be triggered by this decision is to update and communicate data storage and transmission policies. This is because using a cloud vendor for email as a service may introduce new risks and challenges for data storage and transmission, such as data sovereignty, data ownership, data encryption, data backup, data retention, data deletion, data access control, data audit, data breach notification, etc34. Therefore, it is important to update the data storage and transmission policies to reflect the changes in the email environment and the cloud vendor's responsibilities and obligations. It is also important to communicate the updated policies to all relevant stakeholders, such as employees, customers, partners, regulators, etc., to ensure their awareness and compliance12. Reference: Data Storage Policy: Definition & Best Practices. Data Transmission Policy: Definition & Best Practices. Cloud Email Security: Definition & Best Practices. Cloud Data Protection: Definition & Best Practices.

According to the ISACA paper on IT Governance Reporting1, the most important benefit of effective IT governance reporting is that it helps business executives better understand IT's value contribution to the enterprise. IT governance reporting is the process of communicating relevant and reliable information about the performance, value and risk of IT to the stakeholders who are responsible for making decisions and taking actions related to IT. Effective IT governance reporting enables business executives to have a clear and comprehensive view of how IT supports and enables the achievement of the enterprise's strategy, objectives and goals. It also helps business executives to assess the alignment, efficiency and effectiveness of IT, as well as to identify and address the gaps, issues and opportunities for improvement. Effective IT governance reporting fosters trust, collaboration and accountability between business and IT, and enhances the reputation and credibility of IT within the enterprise. The other options are not as important as business executives better understanding IT's value contribution to the enterprise, as they are more related to the means or outcomes of effective IT governance reporting, rather than the benefit itself. : IT Governance Reporting

For large enterprises, the greatest challenge when procuring IaaS is ensuring the vendor meets corporate requirements, including compliance, integration standards, security, scalability, and service levels. The complexity of aligning cloud capabilities with internal policies and operational needs can create governance gaps.
Other options represent necessary practices, but the alignment of vendor capabilities with enterprise standards is foundational to long-term success and risk mitigation.
Reference:
CGEIT Review Manual: Domain 2 - IT Resources and Third-Party Risk
COBIT 2019: APO03 (Manage Enterprise Architecture), APO10 (Manage Suppliers).