This report examines the implementation of cloud services for the Department of Administrative Services (DAS), focusing on the Software as a Service (SaaS) model and its implications on security, privacy, and data governance. It explores the effects of operational solutions on security posture, including data access risks, data portability concerns, and transparency issues with SaaS providers. The report discusses threats and risks to employee data, highlighting security protocols, data encryption, and DLP mechanisms employed in cloud storage. It analyzes security and privacy implications related to data processing locations, legal and constitutional laws, and data availability challenges. The report also addresses issues of data sensitivity, including identity management, cloud standards, and the protection of sensitive data, as well as data sovereignty, considering relevant laws such as the IT Act, CCPA, and GDPR. The conclusion emphasizes the benefits of cloud migration for DAS while acknowledging the need for robust security measures and adherence to data governance regulations.