9 Corporate governance enforcement-Ensure the corporate governance or data security policy is not only established, but enforced. Information leakage is common in China; sometimes sensitive corporate information can be eavesdropped by others in the lift, where people tend to share casual conversation.

10 What if?-It is not necessary to define all the specific details in handling emergency or special situations. But it is a good idea to set different scenarios and discuss with your provider how some of these emergencies will be handled.