CCSK · Question #27
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
The correct answer is B. Greater reliance on contracts, audits, and assessments due to lack of visibility or management. This question tests understanding of the key challenges organizations face when managing enterprise risk for cloud deployments. The correct answer identifies reduced direct visibility as a recognized disadvantage that forces reliance on indirect assurance mechanisms.
Question
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
Options
- AMore physical control over assets and processes.
- BGreater reliance on contracts, audits, and assessments due to lack of visibility or management.
- CDecreased requirement for proactive management of relationship and adherence to contracts.
- DIncreased need, but reduction in costs, for managing risks accepted by the cloud provider.
- ENone of the above.
How the community answered
(52 responses)- A2% (1)
- B75% (39)
- C6% (3)
- D13% (7)
- E4% (2)
Why each option
This question tests understanding of the key challenges organizations face when managing enterprise risk for cloud deployments. The correct answer identifies reduced direct visibility as a recognized disadvantage that forces reliance on indirect assurance mechanisms.
Cloud deployments result in less physical control over assets and processes - not more - because the physical infrastructure is owned and managed by the cloud provider.
A well-documented disadvantage of cloud deployments is the loss of direct visibility into and control over provider-managed infrastructure, which forces organizations to rely heavily on contractual obligations, third-party audits, and security assessments to verify risk posture. This shift from direct operational oversight to indirect assurance mechanisms is a central challenge identified in cloud enterprise risk management frameworks.
Cloud environments actually increase the requirement for proactive relationship management and contract adherence due to reduced direct control, not decrease it.
While responsibility for some risks may shift to the provider, overall risk management costs do not automatically decrease - audit, compliance, and assurance activities often maintain or increase expenditure.
Option B correctly describes a recognized disadvantage of cloud enterprise risk management, so 'none of the above' is factually incorrect.
Concept tested: Enterprise risk management challenges in cloud deployments
Source: https://cloudsecurityalliance.org/research/guidance/
Topics
Community Discussion
No community discussion yet for this question.