When performing audits in relation to Business Continuity Management and Operational Resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud…

Question

Options

• AValidate if the strategy covers unavailability of all components required to operate the business-as-
• BValidate if the strategy covers all aspects of Business Continuity and Resilience planning, taking
• CValidate if the strategy covers all activities required to continue and recover prioritized activities
• DValidate if the strategy is developed by both cloud service providers and cloud service consumers

• A
  4% (1)
• B
  84% (21)
• C
  4% (1)
• D
  8% (2)

Explanation

The MOST critical audit concern is validating that the jointly developed BCM/Operational Resilience strategy covers ALL aspects of Business Continuity and Resilience planning. A joint strategy between cloud customer and cloud service provider must be holistic - if any aspect is omitted (e.g., failover, recovery, communication, testing), the strategy has gaps that could cause failures during a real incident. Option A is narrowly focused on component unavailability, C only addresses activity continuity and recovery, and D only confirms authorship - none of these are as comprehensive as B, which ensures the full scope of BCM/resilience is addressed.

No community discussion yet for this question.