Certificate of Cloud Auditing Knowledge (CCAK) — Question 170

Which of the following factors would PRIMARILY drive the decision to increase the frequency of the audit process to validate the security posture of a cloud service provider on an ongoing basis?

Answer options

• A. Exposure from the cloud supply chain
• B. Decreasing risk appetite
• C. Increasing customer demand
• D. Reliance on the shared responsibility model

Correct answer: B

Explanation

The correct answer is B, as a decreasing risk appetite indicates a lower tolerance for security risks, prompting more frequent audits. Options A, C, and D are relevant factors, but they do not primarily drive the need for increased audit frequency like the organization's risk appetite does.