Certified in Risk and Information Systems Control (CRISC) — Question 550

Which of the following should be used as the PRIMARY basis for evaluating the state of an organization’s cloud computing environment against leading practices?

Answer options

• A. The cloud environment’s risk register
• B. The cloud environment’s capability maturity model
• C. The organization’s strategic plans for cloud computing
• D. The cloud computing architecture

Correct answer: B

Explanation

The cloud environment’s capability maturity model is essential for evaluating the maturity of cloud processes against industry standards. The other options, while relevant, do not provide a comprehensive framework for assessing maturity and alignment with best practices.