CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1236

Risk Assessment

A global company’s business continuity plan (BCP) calls for transferring its customer information systems to an overseas cloud service provider in the event of a disaster. Which of the following is the MOST important risk consideration?

  • A The lack of a service level agreement (SLA) in the vendor contract
  • B The cloud computing environment is shared with another company
  • C The organizational culture differences between each country
  • D The difference in the management practices between each company
Explanation

A service level agreement defines the cloud provider’s measurable availability, recovery, support, and responsibility commitments. Without an SLA in the vendor contract, the organization lacks enforceable assurance that the provider will meet the continuity requirements needed during a disaster.

Community Discussion

No comments yet. Be the first to start the discussion!