Certificate of Cloud Auditing Knowledge (CCAK) — Question 38
Which of the following has the MOST substantial impact on how aggressive or conservative the cloud approach of an organization will be?
Answer options
- A. Internal policies and technical standards
- B. Risk scoring criteria
- C. Applicable laws and regulations
- D. Risk appetite and budget constraints
Correct answer: D
Explanation
The correct answer is D, as an organization's risk appetite and budget constraints directly determine the level of investment and risk they are willing to take with cloud services. While internal policies, risk scoring, and laws are important, they are often shaped or limited by the organization's financial and risk tolerance, making D the most impactful factor.