Prioritizing assurance activities for an organization's cloud services portfolio depends PRIMARILY on an organization's ability to:

Question

Options

• Aschedule frequent reviews with high-risk cloud service providers.
• Bdevelop plans using a standardized risk-based approach.
• Cmaintain a comprehensive cloud service inventory.
• Dcollate views from various business functions using cloud services.

• A
  83% (25)
• B
  3% (1)
• C
  10% (3)
• D
  3% (1)

Explanation

Prioritizing assurance activities across a cloud services portfolio fundamentally depends on the organization's ability to schedule frequent reviews with high-risk cloud service providers. Prioritization is not merely an analytical exercise - it must translate into actionable, differentiated treatment of higher-risk providers through increased review frequency. Without the practical ability to schedule and execute those more frequent reviews with identified high-risk CSPs, prioritization remains theoretical. Maintaining an inventory (C), using a risk-based approach (B), and gathering business input (D) are all inputs that inform prioritization, but the execution of that prioritization depends on the ability to act on it through targeted, frequent reviews.

No community discussion yet for this question.