Certificate of Cloud Auditing Knowledge (CCAK) — Question 34

When migrating to a cloud environment, which of the following should be the PRIMARY driver for the use of encryption?

Answer options

• A. Cloud Service Provider encryption capabilities
• B. The presence of PII
• C. Organizational security policies
• D. Cost-benefit analysis

Correct answer: C

Explanation

The correct answer is C because organizational security policies typically dictate the necessity and framework for implementing encryption to protect data. Options A, B, and D, while relevant, are secondary considerations that should align with the overarching security policies established by the organization.