To identify key actors and requirements, which of the following MUST be considered when designing a cloud compliance program?

Question

Options

• ACloud service provider, internal and external audit perspectives
• BBusiness/organizational, governance, cloud and risk perspectives
• CEnterprise risk management, data protection, privacy and legal perspectives
• DKey stakeholders, enterprise risk management, and Internal audit perspectives

• A
  7% (4)
• B
  75% (43)
• C
  4% (2)
• D
  14% (8)

Explanation

Designing a cloud compliance program requires understanding business/organizational, governance, cloud, and risk perspectives because these four dimensions collectively identify all key actors and requirements. The business/organizational perspective identifies stakeholders and objectives; governance defines accountability and oversight structures; the cloud perspective addresses cloud-specific controls and shared responsibility; and risk identifies what must be managed. The other options (A, C, D) represent narrower viewpoints that are subsets of or subordinate to these four foundational perspectives, and none of them alone provides the comprehensive view needed to identify all key actors and requirements.

No community discussion yet for this question.