ITIL 4 Specialist Collaborate, Assure and ImproveDemo

By ITIL · Question Mode

QuestionQ33

Information Security Management

A small organization plans to migrate some of its IT systems from an on-premise data center to a major cloud service provider.

What should the organization do to ensure its systems and data are sufficiently protected against information security threats?

  • A Keep all sensitive data on premise, migrate only non-critical systems
  • B Employ a specialized service provider to protect the cloud-based data and systems
  • C Update user agreements to transfer liability for possible data losses to the cloud service provider
  • D Utilize information security capabilities offers by the cloud service provider and analyse the residual risks
Explanation

Cloud security is a shared responsibility. The cloud provider secures the underlying infrastructure, but the customer must securely configure the services it uses and protect its data, identities, applications, and workloads. Using the provider’s available security capabilities and assessing residual risk addresses the customer’s remaining security responsibilities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!