Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
When migrating to a cloud environment, the PRIMARY driver for the use of encryption should be: B. The presence of PII The presence of personally identifiable information (PII) is a critical factor because it involves sensitive and private data that must be protected to ensure confidentiality and compliance with privacy regulations. Encryption is a fundamental security measure to safeguard PII from unauthorized access, making it a primary consideration in cloud environments. While organizational security policies and cost-benefit analysis are also important, they typically follow the identification of sensitive data like PII as a driver for encryption.
org sec policy
page 271 of CCAK suggests CSC to validate encryption capabilities of provider before migration