Exam CCAK topic 1 question 16 discussion

C. Validate if the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity, aligned to the risk appetite of the organization including the invocation of continuity plans and crisis management capabilities. This choice is critical because it ensures that the strategy comprehensively addresses the ability to maintain and restore operations within acceptable time frames and capacity. It aligns with the organization's risk appetite and includes the activation of continuity plans and crisis management capabilities. This validation ensures that the organization can effectively respond to and recover from disruptions, maintaining operational resilience in line with strategic objectives.

As the question is about "the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider", the answer is: To validate whether the strategy is developed by both CSPs and cloud customers within the acceptable limits of their risk appetites.

All options are valid because in page 338 are all items. If take in precedence order the first is validate the strategy is designed by both

P# 338

Fist item on page 338 Validate whether the strategy is developed by both CSPs and cloud customers within the acceptable limits of their risk appetites.

Page 338:- Validate whether the strategy covers all aspects of business continuity and resilience planning, taking inputs from the assessed impact and risks, to consider activities for before, during and after a disruption

It is important to ensure that the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity, aligned to the risk appetite of the organization. This includes the invocation of continuity plans and crisis management capabilities.