Isaca CRISC Exam - Topic 7 Question 46 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 46
Topic #: 7

An organization is planning to move its application infrastructure from on-premises to the cloud. Which of the following is the BEST course of the actin to address the risk associated with data transfer if the relationship is terminated with the vendor?

AMeet with the business leaders to ensure the classification of their transferred data is in place

BEnsure the language in the contract explicitly states who is accountable for each step of the data transfer process

CCollect requirements for the environment to ensure the infrastructure as a service (IaaS) is configured appropriately.

DWork closely with the information security officer to ensure the company has the proper security controls in place.

Show Suggested Answer

Suggested Answer: B

by Minna at May 04, 2022, 05:35 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

4 months ago

C is crucial too, but I agree with B being the best option here.

upvoted 0 times

...

Niesha

4 months ago

Wait, how can we trust the vendor to handle our data properly?

upvoted 0 times

...

Alesia

4 months ago

A sounds good, but isn't it a bit late to classify data after transfer?

upvoted 0 times

...

Catrice

4 months ago

I think D is just as important, security controls can't be overlooked.

upvoted 0 times

...

Ashley

5 months ago

B is definitely the way to go! Clear accountability is key.

upvoted 0 times

...

Karan

5 months ago

I feel like ensuring accountability in the contract is key, but I can't recall if that was the main focus in our last review session.

upvoted 0 times

...

Shawnna

5 months ago

I practiced a similar question where we had to consider data classification, but I feel like that might not directly address the risk of vendor termination.

upvoted 0 times

...

Nettie

5 months ago

I remember discussing the importance of contract language in class, but I'm not sure if that's the best option here.

upvoted 0 times

...

Wynell

5 months ago

I think option D makes sense because security controls are crucial, but I wonder if we should focus more on the data transfer specifics.

upvoted 0 times

...

Annice

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully analyze the key influencers visual to identify the relevant factors affecting order quantities.

upvoted 0 times

...

Yuette

5 months ago

This seems straightforward to me. The risk response planning process would have identified new work that needs to be done to address the risks, so the WBS would need to be updated to reflect that new work. Option B is the clear answer here.

upvoted 0 times

...

Ming

5 months ago

Hmm, I'm a bit confused about the differences between editing existing models and creating new ones using Model Manager. I'll need to review that part carefully.

upvoted 0 times

...

Marta

5 months ago

16% covariance seems key here. I'll make sure to carefully use that figure and not mix up correlation and covariance.

upvoted 0 times

...