Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Annual An annual audit schedule is typically appropriate for reviewing a cloud service provider's business continuity plan (BCP) and operational resilience policy. This timeframe allows the organization to assess the provider's preparedness, ensure that any changes in operations or infrastructure are incorporated, and verify that the plans remain effective and aligned with the organization's requirements. While more frequent audits (e.g., quarterly or semi-annual) may be warranted in certain high-risk scenarios or if there are significant changes in the provider's operations, annual audits are generally sufficient for maintaining oversight in most cases.