Exam CCAK topic 1 question 219 discussion

The primary factor that would drive the decision to increase the frequency of auditing a cloud service provider's security posture is: A. Exposure from the cloud supply chain The exposure from the cloud supply chain is a significant risk factor, as it involves various third-party vendors and services that may affect the overall security of the cloud service. If there are heightened risks or vulnerabilities associated with the supply chain, it would necessitate more frequent audits to ensure that the cloud service provider maintains a robust security posture. This approach helps in identifying and mitigating risks that could potentially impact the client's data and operations.

B. Page 320 of the CCAK Study Guide 6.8.2 Continuous Auditing and Continuous Assurance ...In general the fact that a certain control can be expressed as SQO or SLO impacts the way in which such a control can be audited and ultimately the possible frequency of the checks. Of course, the frequency is not just impacted by possible technical limitations, but also by the risk appetite, the compliance requirements and the budget of the organization...