CCAK Question 56

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  D. Using the organization’s risk management framework Controls should be designed by an organization using its risk management framework. This ensures that the controls are tailored to the specific risks and needs of the organization, taking into account its unique environment, regulatory requirements, and business objectives. The risk management framework provides a structured approach to identify, assess, manage, and monitor risks, enabling the design of effective and appropriate controls.

• 4

  Agreed, Answer D p. 301, CCAK Study Guide - "With the cloud's shared responsibility model, the assessor or auditor must establish how the organization has approached the process of designing controls against its own risk management framework and policies."

• 2

  Agree with D