The Chief Executive Officer (CEO) of a corporation decided to move all email to a cloud computing environment. The Chief Information Security Officer (CISO) was told to research the risk involved in…

Question

Options

• ARemind users that all emails with sensitive information need be encrypted and physically
• BEnsure logins are over an encrypted channel and obtain an NDA and an SLA from the
• CEnsure logins are over an encrypted channel and remind users to encrypt all emails that
• DObtain an NDA from the cloud provider and remind users that all emails with sensitive

• A
  16% (7)
• B
  76% (34)
• C
  7% (3)
• D
  2% (1)

Explanation

When moving email to the cloud, risk mitigation requires both technical and contractual controls. Ensuring logins occur over an encrypted channel (e.g., TLS/HTTPS) protects credentials and data in transit. Obtaining an NDA (Non-Disclosure Agreement) legally binds the cloud provider to keep organizational data confidential, while an SLA (Service Level Agreement) formally defines uptime, availability, and performance expectations. Together, these address both the technical exposure and the legal/contractual accountability gap that cloud adoption introduces. The other options are incomplete - they omit either the contractual (NDA/SLA) or the encryption component, leaving significant residual risk.

No community discussion yet for this question.