Certified Information Security Manager (CISM) — Question 1153

When evaluating cloud storage solutions, the FIRST consideration should be:

Answer options

• A. how the organization's sensitive data will be transferred.
• B. the service level agreement (SLA) for encryption keys.
• C. the volume of data to be stored in the cloud.
• D. alignment with the organization's data classification policy.

Correct answer: D

Explanation

The correct answer is D because aligning with the organization's data classification policy ensures that sensitive data is handled according to established guidelines, which is crucial for compliance and security. Options A, B, and C, while important, are secondary considerations that come after establishing a framework based on the data classification policy.