CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ266

VerifiedSecurity and Risk Management

A Chief Information Security Officer (CISO) at a firm that has decided to migrate to the cloud has been tasked with ensuring an optimal level of security. Which of the following should be considered FIRST?

Explanation

Cloud-security planning begins by identifying the control requirements for each application and data repository, based on its data classification, risks, and compliance obligations. Those requirements inform the migration approach, vendor assessment, and allocation of security responsibilities.

Community Discussion

No comments yet. Be the first to start the discussion!