CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following should be the PRIMARY driver for an organization undertaking a multi-year cloud implementation to publish a cloud security policy?

A Evaluating gaps in the on-premise and cloud security profiles
B Establishing minimum cloud security requirements
C Enforcing compliance with cloud security parameters
D Educating IT staff on variances between on-premise and cloud security

Explanation

A cloud security policy establishes the organization’s minimum mandatory security requirements for cloud services and implementations. Those requirements provide the baseline for later gap assessments, compliance enforcement, and staff education.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1268

Community Discussion