Exam CCAK topic 1 question 57 discussion

D. Using the organization’s risk management framework Controls should be designed by an organization using its risk management framework. This ensures that the controls are tailored to the specific risks and needs of the organization, taking into account its unique environment, regulatory requirements, and business objectives. The risk management framework provides a structured approach to identify, assess, manage, and monitor risks, enabling the design of effective and appropriate controls.

Agreed, Answer D p. 301, CCAK Study Guide - "With the cloud's shared responsibility model, the assessor or auditor must establish how the organization has approached the process of designing controls against its own risk management framework and policies."

Agree with D

Should be D. Audit team just suggets control based on risk management.