Certified Information Systems Auditor (CISA) — Question 1292

Which of the following is MOST important to determine during the planning phase of a cloud-based messaging and collaboration platform acquisition?

Answer options

• A. Processes for on-boarding and off-boarding users to the platform
• B. Processes for reviewing administrator activity
• C. Types of data that can be uploaded to the platform
• D. Role-based access control policies

Correct answer: C

Explanation

Identifying the types of data that can be uploaded to the platform is crucial because it directly impacts compliance, security, and functionality. While user on-boarding processes, administrator activity reviews, and role-based access controls are important, they are secondary to understanding the data handling capabilities and limitations of the platform.