IsacaIsaca
CRISC · Question #313
CRISC Question #313: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #313. The question stem and answer options stay visible for context.
Submitted by kim_seoul· Apr 18, 2026Governance
Question
An organization's IT team has proposed the adoption of cloud computing as a cost-saving measure for the business. Which of the following should be of GREATEST concern to the risk practitioner?
Options
- ADue diligence for the recommended cloud vendor has not been performed.
- BThe business can introduce new Software as a Service (SaaS) solutions without IT approval.
- CThe maintenance of IT infrastructure has been outsourced to an Infrastructure as a Service (laaS)
- DArchitecture responsibilities may not be clearly defined.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Cloud Risk#Third-Party Risk Management#Vendor Due Diligence#Risk Governance