Certificate of Cloud Auditing Knowledge (CCAK) — Question 59

As part of cloud migration, who is responsible for defining and setting the applicable controls?

Answer options

• A. Cloud customer
• B. Shared responsibility
• C. Cloud auditor
• D. Cloud provider

Correct answer: A

Explanation

The cloud customer is responsible for defining and implementing the controls that apply to their data and applications in the cloud environment. While the cloud provider offers infrastructure and security measures, the responsibility for control settings ultimately lies with the customer. The other options either relate to roles that do not have the authority to define these controls or describe a collaborative approach rather than individual responsibility.