The BEST way to deliver continuous compliance in a cloud environment is to:

Question

Options

• Adecrease the interval between attestations of compliance.
• Bcombine point-in-time assurance approaches with continuous monitoring.
• Cincrease the frequency of external audits from annual to quarterly.
• Dcombine point-in-time assurance approaches with continuous auditing.

• A
  4% (1)
• B
  86% (24)
• C
  4% (1)
• D
  7% (2)

Explanation

Combining point-in-time assurance (such as audits and attestations) with continuous monitoring is the most effective way to achieve continuous compliance. Point-in-time assessments provide structured, formal validation at intervals, while continuous monitoring fills the gaps by detecting compliance drift in real time between those assessments. Simply decreasing attestation intervals (A) or increasing audit frequency (C) still leaves coverage gaps. Option D mentions 'continuous auditing,' which implies ongoing human audit activity rather than automated monitoring - this is less scalable and practical than a hybrid of structured audits plus automated continuous monitoring.

No community discussion yet for this question.