Certificate of Cloud Auditing Knowledge (CCAK) — Question 201

What should be an organization’s control audit schedule of a cloud service provider’s business continuity plan and operational resilience policy?

Answer options

Correct answer: A

Explanation

The correct answer is A, as an annual audit schedule is typically sufficient to assess the effectiveness of a cloud service provider's business continuity and operational resilience policies. More frequent audits, such as monthly or quarterly, may not be necessary and could lead to resource strain, while semi-annual audits might not provide timely insights into potential issues.