Data classification and modelling based application compliance analysis

1. A data classification and modelling based application compliance analysis apparatus comprising:

at least one hardware processor;

a knowledge graph schema generator, executed by the at least one hardware processor, to

generate, for application data for an application, and based on data laws, a knowledge graph schema;

a knowledge graph instantiator, executed by the at least one hardware processor, to

generate, based on the data laws and the knowledge graph schema, an instantiated knowledge graph;

a data classifier, executed by the at least one hardware processor, to

generate, based on a plurality of data sources, domain knowledge and patterns, and the instantiated knowledge graph, classified data;

a knowledge graph annotator, executed by the at least one hardware processor, to

generate, based on the classified data and the instantiated knowledge graph, an annotated knowledge graph;

a governance and compliance advisor, executed by the at least one hardware processor, to

generate, based on the annotated knowledge graph, an indication of applicable sovereign laws and compliance related to the application data for the application;

a sovereign cloud strategy generator, executed by the at least one hardware processor, to

generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, a sovereign cloud strategy related to the application data for the application;

a sovereign cloud strategy implementer, executed by the at least one hardware processor, to

apply, based on the sovereign cloud strategy related to the application data for the application, the sovereign cloud strategy to the application data for the application; and

store, based on application of the sovereign cloud strategy to the application data for the application, the application data for the application.

2. The data classification and modelling based application compliance analysis apparatus according to claim 1 , wherein the sovereign cloud strategy generator is executed by the at least one hardware processor to:

generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes a ranking of cloud service providers for storage of the application data for the application.

3. The data classification and modelling based application compliance analysis apparatus according to claim 2 , wherein the sovereign cloud strategy generator is executed by the at least one hardware processor to generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes the ranking of cloud service providers for storage of the application data for the application by:

determining, for each cloud service provider of the cloud service providers, and for each factor of a plurality of factors associated with the applicable sovereign laws and compliance, a score.

4. The data classification and modelling based application compliance analysis apparatus according to claim 3 , wherein the sovereign cloud strategy generator is executed by the at least one hardware processor to determine, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors associated with the applicable sovereign laws and compliance, the score by:

modifying, based on a weight associated with each factor of the plurality of factors, the score to generate, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors, a weighted score.

5. The data classification and modelling based application compliance analysis apparatus according to claim 4 , wherein the sovereign cloud strategy generator is executed by the at least one hardware processor to:

determine, for each cloud service provider of the cloud service providers and based on the weighted score corresponding to each factor of the plurality of factors, an overall weighted factor score; and

rank, based on the overall weighted factor score for each cloud service provider of the cloud service providers, the cloud service providers.

6. The data classification and modelling based application compliance analysis apparatus according to claim 2 , wherein

the sovereign cloud strategy generator is executed by the at least one hardware processor to:

generate, for a highest ranked cloud service provider of the ranked cloud service providers, a ranking of cloud service provider offerings for storage of the application data for the application, and

the sovereign cloud strategy implementer is executed by the at least one hardware processor to:

apply, based on the sovereign cloud strategy related to the application data for the application, a highest ranked cloud service provider offering of the ranked cloud service provider offerings to store the application data for the application.

7. The data classification and modelling based application compliance analysis apparatus according to claim 2 , wherein

the sovereign cloud strategy generator is executed by the at least one hardware processor to:

generate, for each ranked cloud service provider of the ranked cloud service providers, a ranking of cloud service provider offerings for storage of the application data for the application; and

determine, based on analysis of a plurality of ranked cloud service provider and ranked cloud service provider offering combinations, a best fit cloud service provider and cloud service provider offering combination, and

the sovereign cloud strategy implementer is executed by the at least one hardware processor to:

apply, based on the sovereign cloud strategy related to the application data for the application, the best fit cloud service provider and cloud service provider offering combination to store the application data for the application.

8. The data classification and modelling based application compliance analysis apparatus according to claim 1 , wherein the knowledge graph schema includes:

a data classification model to classify the application data according to the data laws;

a regional model to encapsulate geographies with respect to larger geographical entities;

a data regulations model to encapsulate the data laws for regions associated with storage of the application data for the application;

a cloud service provider model to encapsulate properties associated with cloud service providers for the storage of the application data for the application; and

a cloud service provider offering model to encapsulate cloud service offerings associated with the cloud service providers.

9. A method for data classification and modelling based application compliance analysis, the method comprising:

generating, by at least one hardware processor, for application data for an application, and based on data laws, a knowledge graph schema;

generating, by the at least one hardware processor, based on the data laws and the knowledge graph schema, an instantiated knowledge graph;

generating, by the at least one hardware processor, based on a plurality of data sources, domain knowledge and patterns, and the instantiated knowledge graph, an annotated knowledge graph;

generating, by the at least one hardware processor, based on the annotated knowledge graph, an indication of applicable sovereign laws and compliance related to the application data for the application;

generating, by the at least one hardware processor, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, a sovereign cloud strategy related to the application data for the application;

applying, by the at least one hardware processor, based on the sovereign cloud strategy related to the application data for the application, the sovereign cloud strategy to the application data for the application; and

storing, by the at least one hardware processor, based on application of the sovereign cloud strategy to the application data for the application, the application data for the application.

10. The method for data classification and modelling based application compliance analysis according to claim 9 , further comprising:

generating, by the at least one hardware processor, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes a ranking of cloud service providers for storage of the application data for the application.

11. The method for data classification and modelling based application compliance analysis according to claim 10 , wherein generating, by the at least one hardware processor, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes the ranking of cloud service providers for storage of the application data for the application, further comprises:

determining, by the at least one hardware processor, for each cloud service provider of the cloud service providers, and for each factor of a plurality of factors associated with the applicable sovereign laws and compliance, a score.

12. The method for data classification and modelling based application compliance analysis according to claim 11 , wherein determining, by the at least one hardware processor, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors associated with the applicable sovereign laws and compliance, the score, further comprises:

modifying, by the at least one hardware processor, based on a weight associated with each factor of the plurality of factors, the score to generate, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors, a weighted score.

13. The method for data classification and modelling based application compliance analysis according to claim 12 , further comprising:

determining, by the at least one hardware processor, for each cloud service provider of the cloud service providers and based on the weighted score corresponding to each factor of the plurality of factors, an overall weighted factor score; and

ranking, by the at least one hardware processor, based on the overall weighted factor score tor each cloud service provider of the cloud service providers, the cloud service providers.

14. The method for data classification and modelling based application compliance analysis according to claim 10 , further comprising:

generating, by the at least one hardware processor, for a highest ranked cloud service provider of the ranked cloud service providers, a ranking of cloud service provider offerings for storage of the application data for the application.

15. The method for data classification and modelling based application compliance analysis according to claim 14 , further comprising:

applying, by the at least one hardware processor, based on the sovereign cloud strategy related to the application data for the application, a highest ranked cloud service provider offering of the ranked cloud service provider offerings to store the application data for the application.

16. The method for data classification and modelling based application compliance analysis according to claim 9 , wherein the annotated knowledge graph further comprises at least one of:

a data classification model to classify the application data according to the data laws;

a regional model to encapsulate geographies with respect to larger geographical entities;

a data regulations model to encapsulate the data laws for regions associated with storage of the application data for the application;

a cloud service provider model to encapsulate properties associated with cloud service providers for the storage of the application data for the application; or a cloud service provider offering model to encapsulate cloud service offerings associated with the cloud service providers.

17. A non-transitory computer readable medium having stored thereon machine readable instructions, the machine readable instructions, when executed by at least one hardware processor, cause the at least one hardware processor to:

generate, for application data for an application, and based on data laws and a knowledge graph schema, an annotated knowledge graph;

generate, based on the annotated knowledge graph, an indication of applicable sovereign laws and compliance related to the application data for the application; and

generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, a sovereign cloud strategy related to the application data for the application, apply, based on the sovereign cloud strategy related to the application data for the application, the sovereign cloud strategy to the application data for the application; and

store, based on application of the sovereign cloud strategy to the application data for the application, the application data for the application.

18. The non-transitory computer readable medium according to claim 17 , the machine readable instructions, when executed by at least one hardware processor, further cause the at least one hardware processor to:

generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes a ranking of cloud service providers for storage of the application data for the application.

19. The non-transitory computer readable medium according to claim 18 , the machine readable instructions to generate, based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, the sovereign cloud strategy that includes the ranking of cloud service providers for storage of the application data for the application, when executed by at least one hardware processor, further cause the at least one hardware processor to:

determine, for each cloud service provider of the cloud service providers, and for each factor of a plurality of factors associated with the applicable sovereign laws and compliance, a score.

20. The non-transitory computer readable medium according to claim 19 , the machine readable instructions to determine, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors associated with the applicable sovereign laws and compliance, the score, when executed by at least one hardware processor, further cause the at least one hardware processor to:

modify, based on a weight associated with each factor of the plurality of factors, the score to generate, for each cloud service provider of the cloud service providers, and for each factor of the plurality of factors, a weighted score.