Certified in the Governance of Enterprise IT (CGEIT) — Question 137

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

Answer options

• A. Update and communicate data storage and transmission policies.
• B. Develop a data protection awareness education training program.
• C. Monitor outgoing email traffic for malware.
• D. Implement a data classification and storage management tool.

Correct answer: A

Explanation

The correct answer is A because transitioning to a cloud vendor for email services necessitates an update to data storage and transmission policies to ensure compliance and security. Options B, C, and D, while important, do not directly address the immediate need to revise policies related to the new cloud-based email service.