As more enterprises migrate to cloud-hosted virtual desktops and Desktop as a Service (DaaS) models, compliance and audit teams need to understand how control frameworks change. I'm preparing guidance for our audit committee on a planned migration from on-prem VDI solutions to a managed DaaS environment. Key areas I'm covering: (1) Change in control ownership and responsibility matrix (RACI shifts significantly in managed DaaS), (2) Third-party risk management for DaaS providers, (3) Data classification and access logging in cloud-hosted virtual desktops, (4) ITGC and SOX implications of hybrid workspace virtualization. Has anyone published or presented on this at ISACA chapters? Would love to see frameworks or case studies from organizations that have navigated compliance through DaaS migration.

• You need to login to have access to uploads.