Certified in the Governance of Enterprise IT (CGEIT) — Question 43

An enterprise has made a decision to move some business applications to the public cloud despite being very new to the cloud environment. What is MOST important for the CIO to do to help ensure the success of this initiative?

Answer options

• A. Review the vendor management framework.
• B. Request a right-to-audit clause in the provider contract.
• C. Require a vulnerability and threat assessment.
• D. Ensure the cloud provider complies with international standards.

Correct answer: D

Explanation

Ensuring the cloud provider complies with international standards is crucial for security, data protection, and legal compliance, which can significantly impact the success of cloud initiatives. While reviewing vendor management, requesting audit clauses, and conducting assessments are important, they do not directly ensure that the provider meets necessary compliance and operational standards that are vital for a successful cloud deployment.