Certificate of Cloud Auditing Knowledge (CCAK) — Question 17

The criteria for limiting services allowing non-critical services or services requiring high availability and resilience to be moved to the cloud is an important consideration to be included PRIMARILY in the:

Answer options

• A. risk management policy.
• B. cloud policy.
• C. business continuity plan.
• D. information security standard for cloud technologies.

Correct answer: C

Explanation

The business continuity plan (C) focuses on maintaining essential services during disruptions, making it crucial for determining which services can be moved to the cloud while ensuring resilience. The other options, while important, do not primarily address the continuity and availability aspects in the same way that the business continuity plan does.