Certified Information Systems Auditor (CISA) — Question 802

Which of the following should be the FIRST consideration when deciding whether data should be moved to a cloud provider for storage?

Answer options

• A. Data classification
• B. Vendor cloud certification
• C. Data storage costs
• D. Service level agreements (SLAs)

Correct answer: A

Explanation

Data classification is vital because it helps assess the sensitivity and importance of the data, which influences the decision to move it to the cloud. While vendor certifications, costs, and SLAs are important, they should be considered after understanding the data's classification and associated risks.