While performing the audit, the auditor found that an object storage bucket containing PII could be accessed by anyone on the Internet. Given this discovery, what should be the most appropriate action for the auditor to perform?

• A.Documenting the finding in the audit report and sharing the gap with the relevant stakeholders
• B.Asking the organization's cloud administrator to immediately close the gap by updating the configuration settings and making the object storage bucket private and hence inaccessible from the Internet
• C.Informing the organization's internal audit manager immediately about the gap
• D.Highlighting the gap to the audit sponsor at the sponsor's earliest possible availability

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a direct benefit of mapping the Cloud Control Matrix (CCM) to other international standards and regulations?

• A.CCM mapping enables cloud service providers and customers alike to streamline their own compliance and security efforts.
• B.CCM mapping entitles cloud service providers to be certified under the CSA STAR program.
• C.CCM mapping enables an uninterrupted data flow and, in particular, the export of personal data across different jurisdictions.
• D.CCM mapping entitles cloud service providers to be listed as an approved supplier for tenders and government contracts.

Comment: *

Name: *

Email: *

Verification: *

The Cloud Octagon Model was developed to support organizations:

• A.risk assessment methodology.
• B.incident response methodology.
• C.risk treatment methodology.
• D.incident detection methodology.

Comment: *

Name: *

Email: *

Verification: *

Under GDPR, an organization should report a data breach within what time frame?

• A.48 hours
• B.2 weeks
• C.72 hours
• D.1 week

Comment: *

Name: *

Email: *

Verification: *

Which of the following aspects of risk management involves identifying the potential reputational harm and/or financial harm when an incident occurs?

• A.Mitigations
• B.Residual risk
• C.Impact Analysis
• D.Likelihood

Comment: *

Name: *

Email: *

Verification: *