Certificate of Cloud Auditing Knowledge (CCAK) — Question 264

Which of the following is the MOST efficient way for a customer organization to minimize the risk from a cloud service provider’s aggressive product release strategy that could cause the customer to deviate from its compliance obligations?

Answer options

• A. Including a break clause in the provider processing contract to be activated in the event of significant product change
• B. Developing multiple lines of communication with the provider that provide visibility into upcoming changes to the product
• C. Maintaining a failover processing agreement with another provider offering a similar product
• D. Requiring that the source code for the provider product be held in escrow with an independent third party

Correct answer: B

Explanation

Option B is correct because developing multiple lines of communication allows the organization to stay informed about product changes, enabling proactive compliance measures. Options A, C, and D are less efficient as they do not provide the same level of ongoing awareness and adaptability to changes in the provider's product offerings.