IsacaIsaca
CCAK · Question #20
CCAK Question #20: Real Exam Question with Answer & Explanation
Sign in or unlock CCAK to reveal the answer and full explanation for question #20. The question stem and answer options stay visible for context.
Cloud Risk Management
Question
Since CCM allows cloud customers to build a detailed list of requirements and controls to be implemented by the CSP as part of their overall third-party risk management and procurement program, will CCM alone be enough to define all the items to be considered when operating/using cloud services?
Options
- ANo. CCM must be completed with definitions established by the CSP because of its relevance to
- BYes. CCM suffices since it maps a huge library of widely accepted frameworks.
- CYes. When implemented in the right manner. CCM alone can help to measure, assess and monitor
- DNo. CCM can serve as a foundation for a cloud assessment program, but it needs to be completed
Unlock CCAK to see the answer
You've previewed enough free CCAK questions. Unlock CCAK for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#CCM#Cloud Controls#Shared Responsibility Model#Cloud Risk Management