Certificate of Cloud Auditing Knowledge (CCAK) — Question 207

What should be the control audit frequency for Business Continuity Management?

Answer options

• A. Quarterly
• B. Annually
• C. Monthly
• D. Semi-annually

Correct answer: B

Explanation

The correct answer is 'B. Annually' because Business Continuity Management requires regular reviews to ensure effectiveness, and an annual audit strikes a balance between thoroughness and resource allocation. The other options suggest either too frequent or too infrequent reviews that may not adequately address the evolving nature of business risks.