nerdexam
Isaca

CCAK · Question #97

The criteria for limiting services allowing non-critical services or services requiring high availability and resilience to be moved to the cloud is an important consideration to be included…

The correct answer is C. business continuity plan. The Business Continuity Plan (BCP) is the primary document that defines which services are critical versus non-critical, and which have high availability and resilience requirements. The BCP establishes the criteria and thresholds that determine whether a service can tolerate…

Cloud Risk Management

Question

The criteria for limiting services allowing non-critical services or services requiring high availability and resilience to be moved to the cloud is an important consideration to be included PRIMARILY in the:

Options

  • Arisk management policy.
  • Bcloud policy.
  • Cbusiness continuity plan.
  • Dinformation security standard for cloud technologies.

How the community answered

(26 responses)
  • A
    4% (1)
  • C
    96% (25)

Explanation

The Business Continuity Plan (BCP) is the primary document that defines which services are critical versus non-critical, and which have high availability and resilience requirements. The BCP establishes the criteria and thresholds that determine whether a service can tolerate cloud migration risk. Services that require high availability and resilience are addressed in the BCP through RTOs, RPOs, and criticality tiers. While cloud policy and risk management policy are relevant, they are broader documents - the BCP specifically governs continuity criteria for service classification and migration decisions.

Topics

#Business continuity planning#Cloud service classification#High availability#Cloud migration strategy

Community Discussion

No community discussion yet for this question.

Full CCAK Practice