Isaca
CISM · Question #743
Which of the following should be of GREATEST concern to an information security manager when evaluating a cloud service provider?
The correct answer is C. Security controls offered by the provider are inadequate.. Inadequate security controls pose the greatest risk, as they directly affect the confidentiality, integrity, and availability of organizational data stored with the cloud service provider.
Submitted by yuki_2020· Apr 18, 2026Information Security Risk Management
Question
Which of the following should be of GREATEST concern to an information security manager when evaluating a cloud service provider?
Options
- AThe provider is new to the market and lacks references.
- BData retention policies are not documented.
- CSecurity controls offered by the provider are inadequate.
- DThere is no right to audit the security of the provider.
How the community answered
(28 responses)- A29% (8)
- B7% (2)
- C50% (14)
- D14% (4)
Explanation
Inadequate security controls pose the greatest risk, as they directly affect the confidentiality, integrity, and availability of organizational data stored with the cloud service provider.
Topics
#Cloud Security#Vendor Risk Management#Security Controls Evaluation#Risk Prioritization
Community Discussion
No community discussion yet for this question.