Certified in Risk and Information Systems Control (CRISC) — Question 539

Which of the following would provide the MOST helpful input to develop risk scenarios associated with hosting an organization’s key IT applications in a cloud environment?

Answer options

• A. Conducting a risk workshop with key stakeholders
• B. Reviewing the results of independent audits
• C. Performing a due diligence review
• D. Performing a site visit to the cloud provider’s data center

Correct answer: A

Explanation

Conducting a risk workshop with key stakeholders is the most effective method since it involves direct input from those who understand the organization's specific risks and needs. The other options, while helpful, do not provide the same level of tailored insights as a workshop with stakeholders who are directly involved in the IT applications.