For an auditor auditing an organization's cloud resources, which of the following should be of GREATEST concern?
A.
The organization does not have separate policies for governing its cloud environment.
B.
The organization's IT team does not include resources with cloud certifications.
C.
The organization does not perform periodic reviews or control monitoring for its cloud environment, but it has a documented audit plan and performs an audit for its cloud environment every alternate year.
D.
The risk management team reports to the head of audit.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit