An organization deploying the Cloud Controls Matrix (CCM) to perform a compliance assessment will encompass the use of the Corporate Governance Relevance feature to filter out those controls:

A. that are related to policies, processes, laws, regulations, and institutions conditioning the way an organization is managed, directed, or controlled.

B. that can be of either an administrative or a technical nature, therefore requiring an approval from the Change Advisory Board.

C. that can be of either a management or a legal nature, therefore requiring an approval from the Change Advisory Board.

D. that require prior approval from the Board of Directors to be funded (for either make or buy), implemented, and reported on.








 

Suggested Answer: A

Community Answer: A



This question is in CCAK Certificate of Cloud Auditing Knowledge Exam
For getting Certificate of Cloud Auditing Knowledge (CCAK)










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.