MENU
An enterprise has decided to adopt cloud services. Which of the following should be established FIRST?
Suggested Answer: C
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Before adopting cloud services, it is critical to establish the organization's risk tolerance levels. This ensures that decisions regarding the use of cloud services align with the enterprise's ability and willingness to accept risk, such as data exposure or operational disruptions. Risk tolerance informs the creation of SLAs, third-party management frameworks, and BCPs, making it a foundational step. Reference: ISACA Cloud Computing Governance guidelines, CGEIT Exam Manual.
14 comments · newest first
AD
Adell
10 months ago
Totally agree with SLAs, they set the foundation!
ET
Ettie
11 months ago
Wait, why are we even talking about SLAs first? Seems off.
GE
Gertude
11 months ago
Risk tolerance levels are key before anything else.
BE
Bettye
11 months ago
I think a BCP should come first, though.
CO
Cordelia
11 months ago
SLAs are super important for cloud services!
EL
Elroy
12 months ago
I vaguely remember discussing third-party management frameworks, but I thought they were more of a later step in the process.
CA
Carli
12 months ago
I feel like a business continuity plan is important, but I can't recall if it comes before SLAs or not.
MA
Marylin
12 months ago
I remember a practice question where we had to prioritize risk management first, so maybe risk tolerance levels could be the right answer here.
CH
Chantay
1 year ago
I think we talked about SLAs being crucial for cloud services, but I'm not sure if they should be the very first thing established.
LA
Lawana
1 year ago
Risk tolerance levels seem like the logical starting point to me. The enterprise needs to understand its risk appetite before committing to cloud services.
JA
Jade
1 year ago
I'm leaning towards the business continuity plan (BCP) as the most important first step. You need to have a plan in place to maintain operations in case of any disruptions with the cloud services.
DA
Dannette
1 year ago
Okay, I've got this. The first thing that needs to be established is the service level agreements (SLAs) with the cloud provider. That will set the expectations and ensure the enterprise is getting the right level of service.
VE
Veronika
1 year ago
Hmm, I'm a bit unsure here. I'm trying to think through the logical order of steps, but I'm not totally confident in my approach.
EL
Elly
1 year ago
This is a tricky one. I think I need to focus on the key phrase "FIRST" to determine the most critical step before adopting cloud services.