Certificate of Cloud Auditing Knowledge (CCAK) — Question 253

An organization is using the Cloud Controls Matrix (CCM) to extend its IT governance in the cloud. Which of the following is the BEST way for the organization to take advantage of the supplier relationship feature?

Answer options

• A. Leverage this feature to enable a smarter selection of the next cloud provider.
• B. Filter out only those controls directly influenced by contractual agreements.
• C. Leverage this feature to enable the adoption of the Shared Responsibility Model.
• D. Filter out only those controls having a direct impact on current terms of service (TOS) and service level agreement (SLA).

Correct answer: A

Explanation

The correct answer is A because leveraging the supplier relationship feature allows for a more informed selection of cloud providers based on their compliance with the CCM. The other options focus on filtering controls or applying them in contexts that do not optimize the selection process for cloud providers.