Isaca
CISA · Question #470
An organization is deciding whether to move on-premise workloads to a third-party Infrastructure as a Service (IaaS) platform. Which of the following is MOST important for an IS auditor to consider wh
Sign in or unlock CISA to reveal the answer and full explanation for question #470. The question stem and answer options stay visible for context.
Submitted by ricky.ec· Apr 18, 2026Governance and Management of IT
Question
An organization is deciding whether to move on-premise workloads to a third-party Infrastructure as a Service (IaaS) platform. Which of the following is MOST important for an IS auditor to consider when evaluating the potential risks?
Options
- AThe provider's risk assessment and risk mitigation procedures
- BSecurity clauses documented within cloud service agreements
- CThe organization's external business environment
- DThe organization's risk appetite and risk tolerance
Unlock CISA to see the answer
You've previewed enough free CISA questions. Unlock CISA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk Management#Risk Appetite#Cloud Computing#IS Audit Considerations