nerdexam
Isaca

CGEIT · Question #5

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be…

The correct answer is D. Update and communicate data storage and transmission policies. Transitioning email services to the cloud changes how and where data is stored and transmitted, introducing new security, compliance, and privacy considerations. Updating policies ensures that data handling aligns with cloud environments, regulatory requirements, and…

Submitted by obi.ng· Apr 18, 2026Governance of Enterprise IT

Question

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

Options

  • ADevelop a data protection awareness education training program
  • BMonitor outgoing email traffic for malware.
  • CImplement a data classification and storage management tool.
  • DUpdate and communicate data storage and transmission policies.

How the community answered

(24 responses)
  • A
    17% (4)
  • B
    4% (1)
  • C
    8% (2)
  • D
    71% (17)

Explanation

Transitioning email services to the cloud changes how and where data is stored and transmitted, introducing new security, compliance, and privacy considerations. Updating policies ensures that data handling aligns with cloud environments, regulatory requirements, and organizational risk Clear communication of updated policies educates users on their responsibilities regarding data protection, acceptable use, and compliance in the new cloud-based context.

Topics

#Cloud adoption#IT Governance#Policy management#Strategic actions

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice