Certificate of Cloud Auditing Knowledge (CCAK) — Question 93

Which of the following is MOST important to consider when an organization is building a compliance program for the cloud?

Answer options

• A. The rapidly changing service portfolio and architecture of the cloud.
• B. Cloud providers should not be part of the compliance program.
• C. The fairly static nature of the service portfolio and architecture of the cloud.
• D. The cloud is similar to the on-premise environment in terms of compliance.

Correct answer: A

Explanation

The correct answer is A because the cloud environment is continually evolving, making it crucial for compliance programs to adapt to these changes. Options B and D are incorrect as they dismiss the role of cloud providers in compliance and incorrectly equate cloud to on-premise environments. Option C is also wrong because it inaccurately describes the cloud's service portfolio as static.