What should an auditor do when assessing the business continuity plan (BCP) and disaster recovery (DR) of a cloud customer?

A. Evaluate the service level agreement (SLA) through a BCP/DR lens.

B. Get assurances from the cloud service provider that the service level agreement (SLA) can be met in a BCP/DR scenario.

C. Recommend auditing the BCP/DR planning under a separate engagement.

D. Limit the scope of the evaluation to security measures that are under the direct responsibility of the auditee.








 

Suggested Answer: A

Community Answer: A



This question is in CCAK Certificate of Cloud Auditing Knowledge Exam
For getting Certificate of Cloud Auditing Knowledge (CCAK)










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.