Exam CCAK topic 1 question 60 discussion

CCAK Page 37 To Implement the assurance program, a. Map and classify relevant data for the migration b. Identify processes, functions and systems relevant to the migration c. Rate cloud application sensitivity

A. Development of the monitoring goals and requirements During the implementation phase of a cloud assurance program in a cloud migration, one of the key activities is the development of monitoring goals and requirements. This involves setting up the necessary metrics, tools, and processes to continuously monitor and assess the performance, security, and compliance of the cloud environment. This ensures that the cloud services meet the organization's standards and regulatory requirements, and helps in detecting and responding to any issues promptly.

A. Development of the monitoring goals and requirements In the implementation phase of a cloud assurance program, developing monitoring goals and requirements is crucial. This activity involves setting up the metrics, tools, and procedures needed to continuously monitor and assess the cloud environment’s compliance, performance, and security as the organization migrates to the cloud. The other options are typically part of the planning phase: B. Identification of processes, functions, and systems is a preliminary step in planning to understand what will be affected by the migration. C. Identification of relevant laws, regulations, and standards is essential for planning compliance requirements. D. Identification of roles and responsibilities is part of the planning phase to define accountability and ownership before implementation.

CCAK Study Guide Implement the assurance program 1. Map and classify the data relevant for the migration. 2. Identify the processes, functions and systems 3. Rate cloud application sensitivity 4. Implement security requirements and risk assessment processes

it is B

B. Page 37 from CCAK Study Guide

These activities include the implementation of information system security engineering, threat and risk assessment, security assessment, and authorization.