CISA · Question #392
An organization is implementing a new cloud-based application to store sensitive customer data. The application is hosted in a country with a different regulatory environment than the organization's…
The correct answer is B. Review the cloud provider's infrastructure details and control documentation. The best way to ensure data compliance with regulatory requirements is to review the cloud provider’s infrastructure details and control documentation. This ensures that the cloud provider implements the necessary controls and complies with relevant regulations, including those…
Question
An organization is implementing a new cloud-based application to store sensitive customer data. The application is hosted in a country with a different regulatory environment than the organization’s home country. Which of the following is the BEST way to ensure data compliance with regulatory requirements?
Options
- AConfirm the cloud provider's teams of service are compliant with the organization's regulatory
- BReview the cloud provider's infrastructure details and control documentation
- CImplement data security to protect from unauthorized access in line with local regulatory
- DReview the cloud provider's logs for any signs of unauthorized access or misuse
How the community answered
(32 responses)- A9% (3)
- B72% (23)
- C6% (2)
- D13% (4)
Explanation
The best way to ensure data compliance with regulatory requirements is to review the cloud provider’s infrastructure details and control documentation. This ensures that the cloud provider implements the necessary controls and complies with relevant regulations, including those concerning data storage, protection, and privacy. This is particularly important when the application is hosted in a jurisdiction with a different regulatory environment, as it allows the organization to verify that the provider’s policies align with the organization's compliance
Topics
Community Discussion
No community discussion yet for this question.