CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following would offer the MOST useful input for developing risk scenarios related to hosting an organization’s key IT applications in a cloud environment?

A Conducting a risk workshop with key stakeholders
B Reviewing the results of independent audits
C Performing a due diligence review
D Performing a site visit to the cloud provider’s data center

Explanation

A risk workshop with key stakeholders provides direct, organization-specific insight into critical application dependencies, likely threat events, business impacts, and risk tolerances. This information is essential for defining meaningful cloud-hosting risk scenarios.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ491

Community Discussion