Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. **Use of an established standard/regulation to map controls and use as the audit criteria** For an organization that is new to cloud adoption and lacks extensive knowledge about cloud security and shared responsibility models, using an established standard or regulation is the best approach. This provides a structured framework for evaluating cloud security, ensuring that all necessary controls are considered and that the organization meets industry best practices. Established standards, such as ISO/IEC 27017 for cloud-specific controls or the Cloud Security Alliance's Cloud Controls Matrix, are designed to address the unique challenges of cloud environments and can provide clear guidance on responsibilities and security measures. This approach helps the organization systematically assess its cloud security posture and guides the implementation of appropriate controls.