What should be an organization's MAIN concern when evaluating an Infrastructure as a Service (IaaS) cloud computing model for an e-commerce application?

The correct answer is D. Availability of provider's services. For an e-commerce application hosted on IaaS, availability of the provider's services is the paramount concern. E-commerce generates revenue directly proportional to uptime - any outage by the cloud provider immediately translates to lost sales, damaged customer trust, and potent

Submitted by ngozi_ng· Apr 18, 2026Information Security Risk Management

Question

Options

AInternal audit requirements
BIncreased security administration cost
CApplication ownership
DAvailability of provider's services

How the community answered

(47 responses)

A
32% (15)
B
9% (4)
C
17% (8)
D
43% (20)

Explanation

For an e-commerce application hosted on IaaS, availability of the provider's services is the paramount concern. E-commerce generates revenue directly proportional to uptime - any outage by the cloud provider immediately translates to lost sales, damaged customer trust, and potential SLA violations. Under IaaS, the customer controls the application and OS layers, but the underlying infrastructure availability is entirely dependent on the provider. Internal audit requirements (A) and increased security costs (B) are secondary operational concerns. Application ownership (C) is not a significant concern in IaaS because the customer retains ownership and control of the application - that is a distinguishing feature of IaaS versus PaaS or SaaS.

Topics

#Cloud Computing#IaaS#Availability#Third-party Risk

Community Discussion

No community discussion yet for this question.

Full CISM Practice