Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CCAK Exam - Topic 2 Question 39 Discussion

When performing audits in relation to business continuity management and operational resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider?
A) Validate whether the strategy covers all aspects of business continuity and resilience planning, taking inputs from the assessed impact and risks, to consider activities for before, during, and after a disruption.
B) Validate whether the strategy is developed by both cloud service providers and cloud service consumers within the acceptable limits of their risk appetite.
C) Validate whether the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity, aligned to the risk appetite of the organization including the invocation of continuity plans and crisis management capabilities.

Isaca CCAK Exam - Topic 2 Question 39 Discussion

Actual exam question for Isaca's CCAK exam
Question #: 39
Topic #: 2
[All CCAK Questions]

When performing audits in relation to business continuity management and operational resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Lindsey at Feb 08, 2024, 11:43 PM

Limited Time Offer

25%

Off

Get Premium CCAK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Cathrine
7 months ago
Not sure if B is enough, feels like it’s missing some key elements.
upvoted 0 times
...
Willie
8 months ago
C covers the most ground, can’t overlook those time frames!
upvoted 0 times
...
Carisa
8 months ago
Surprised that A isn’t getting more love, it seems fundamental.
upvoted 0 times
...
Fabiola
8 months ago
I think B is crucial too, risk appetite matters!
upvoted 0 times
...
Gladys
8 months ago
Definitely option C, it’s all about prioritizing recovery!
upvoted 0 times
...
Lashanda
9 months ago
I recall a similar question where we focused on the collaboration between the provider and consumer. That makes me lean towards option B.
upvoted 0 times
...
Madalyn
9 months ago
I’m a bit uncertain about whether the strategy needs to cover all aspects or just the prioritized activities. It feels like both are important.
upvoted 0 times
...
Tiera
9 months ago
I think option C sounds familiar; it emphasizes recovery activities and time frames, which we practiced in our case studies.
upvoted 0 times
...
Lashandra
9 months ago
I remember discussing the importance of aligning the strategy with risk appetite, but I'm not sure if that's the most critical aspect to audit.
upvoted 0 times
...
Beckie
9 months ago
I'm a bit confused by this question. There are a lot of details to consider, like the roles of the cloud provider and customer, the different phases of business continuity, and the risk appetite. I'll have to really think through each option carefully to determine the most critical aspect.
upvoted 0 times
...
Serina
9 months ago
Okay, I've got this. The answer is clearly C - it covers all the critical elements of a robust business continuity strategy, including prioritized activities, recovery time frames, and alignment with the organization's risk appetite. That's the most complete and important aspect to audit.
upvoted 0 times
...
Margot
9 months ago
Hmm, this is a tricky one. I'm not entirely sure what the "most critical aspect" they're looking for is. I'll have to carefully read through the options and think about which one is the most comprehensive.
upvoted 0 times
...
Myrtie
9 months ago
This question seems to be testing our understanding of business continuity and resilience planning in the context of cloud services. I think the key is to focus on the joint strategy between the cloud customer and provider.
upvoted 0 times
...
Caitlin
9 months ago
Risk is an interesting option, but I'm not sure if that's considered a filter column for the Application Filter. I'll have to think carefully about which three make the most sense based on my knowledge of this feature.
upvoted 0 times
...
Veronika
9 months ago
This looks like a pretty straightforward network security question. I think I can handle this one.
upvoted 0 times
...
Trinidad
9 months ago
Hmm, I'm a bit unsure about this one. The question mentions a "missing 'body' section", but I'm not sure what that refers to. I'll need to analyze the code snippets more closely to figure out the right approach.
upvoted 0 times
...
Clay
10 months ago
Water transportation doesn't seem right for detention charges… but then again, could it be related to the port delays?
upvoted 0 times
...
Carey
2 years ago
Agreed. It's important to ensure the strategy includes the invocation of continuity plans and crisis management capabilities.
upvoted 0 times
...
Elena
2 years ago
I think overall, we should validate if the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity.
upvoted 0 times
...
Timothy
2 years ago
That's a good point, Carey. It's crucial that the strategy align with the risk appetite of the organization.
upvoted 0 times
...
Carey
2 years ago
But shouldn't we also validate if the strategy is developed by both providers and consumers within acceptable limits of their risk appetite?
upvoted 0 times
...
Elena
2 years ago
I agree with Timothy. It's important to consider activities for before, during, and after a disruption.
upvoted 0 times
...
Timothy
2 years ago
I think the most critical aspect to audit is whether the strategy covers all aspects of business continuity and resilience planning.
upvoted 0 times
...

Save Cancel