Certificate of Cloud Auditing Knowledge (CCAK) — Question 121

Which of the following should be performed FIRST when an organization is considering a migration to the cloud?

Answer options

• A. Select the cloud deployment model.
• B. Identify applicable laws and regulations to the organization.
• C. Select a suitable control framework for the implementation.
• D. Identify different suitable cloud service providers.

Correct answer: B

Explanation

Identifying applicable laws and regulations is crucial as it ensures compliance and protects the organization from legal issues during and after migration. If the legal framework is not understood first, subsequent steps like selecting a deployment model or service provider may lead to non-compliance. The other options are important but should follow after understanding the legal landscape.