exam questions

Exam CCAK All Questions

View all questions & answers for the CCAK exam

Exam CCAK topic 1 question 57 discussion

Actual exam question from Isaca's CCAK
Question #: 57
Topic #: 1
[All CCAK Questions]

How should controls be designed by an organization?

  • A. By the internal audit team
  • B. Using the ISO27001 framework
  • C. By the cloud provider
  • D. Using the organization’s risk management framework
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Auditor2020
3 months, 3 weeks ago
Selected Answer: D
D. Using the organization’s risk management framework Controls should be designed by an organization using its risk management framework. This ensures that the controls are tailored to the specific risks and needs of the organization, taking into account its unique environment, regulatory requirements, and business objectives. The risk management framework provides a structured approach to identify, assess, manage, and monitor risks, enabling the design of effective and appropriate controls.
upvoted 1 times
...
ME79
2 years ago
Agreed, Answer D p. 301, CCAK Study Guide - "With the cloud's shared responsibility model, the assessor or auditor must establish how the organization has approached the process of designing controls against its own risk management framework and policies."
upvoted 3 times
...
Ghac101
2 years, 3 months ago
Agree with D
upvoted 2 times
...
bportuguez
2 years, 3 months ago
Selected Answer: D
Should be D. Audit team just suggets control based on risk management.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago