Certificate of Cloud Auditing Knowledge (CCAK) — Question 118

If a cloud agreement allows the cloud service provider to decommission any service within a set period, who is responsible for managing the risk introduced by this change?

Answer options

• A. Cloud service provider and risk manager
• B. Regulator
• C. Cloud service provider
• D. Cloud customer

Correct answer: D

Explanation

The cloud customer is responsible for managing the risks that arise from changes in services, as they are the ones who rely on those services for their operations. The cloud service provider may implement the change, but the customer must assess and mitigate any potential impacts on their business. The other options do not directly relate to the management of risk in this context.