Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Design Unfair question, its really misleading. However, there are 3 PHASES / STEPS related to the cloud assurance program: First: Design Second: Develop Third: Implement The first STEP / PHASE "Design" contains the first ACTIVITY / TASK "Stakeholder identification. But question is related to PHASE/ STEP and NOT ACTIVITY / TASK. see study guide page 35.
B. Stakeholder identification The first step to establish a cloud assurance program during a cloud migration should be stakeholder identification. Identifying the key stakeholders ensures that all relevant parties are involved from the beginning, including those who will be affected by or responsible for the cloud migration. This step helps in understanding the requirements, expectations, and concerns of different stakeholders, which is essential for the successful planning, design, and implementation of the cloud assurance program. Engaging stakeholders early sets a solid foundation for subsequent steps such as risk assessment, design, and development.
B. Stakeholder identification The first step in establishing a cloud assurance program during a cloud migration is to identify stakeholders. This step is crucial because it helps to gather input from all relevant parties, including IT, security, compliance, legal, and business units. Engaging stakeholders early ensures that their requirements, expectations, and risk tolerances are integrated into the program from the beginning, providing a strong foundation for subsequent design, risk assessment, and development phases. The other steps follow stakeholder identification: A. Design can only be effectively performed after identifying key stakeholders and gathering their input. C. Development comes after establishing the program's design and requirements. D. Risk assessment is critical but requires stakeholder input to understand all relevant risks.