IsacaIsaca
CGEIT · Question #437
CGEIT Question #437: Real Exam Question with Answer & Explanation
Sign in or unlock CGEIT to reveal the answer and full explanation for question #437. The question stem and answer options stay visible for context.
Submitted by akirajp· Apr 18, 2026Governance of Enterprise IT
Question
An IT steering committee has received a report that supports the economic and service benefits of moving infrastructure hosting to an external cloud provider. Business leadership is very concerned about the security risk and potential loss of customer data. What is the BEST way for the committee to address these concerns?
Options
- AMandate there will be no customer data at rest stored on cloud servers used by the vendor.
- BInclude compliance with the enterprise's data governance policy in the contract.
- CEnsure reporting and penalty clauses are included in the contract for any loss of data.
- DRequire an encrypted connection between the cloud and enterprise servers.
Unlock CGEIT to see the answer
You've previewed enough free CGEIT questions. Unlock CGEIT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Cloud Security#Data Governance#Third-Party Risk#Contractual Agreements