Exam CRISC All QuestionsBrowse all questions from this exam
Question 787

A global company's business continuity plan (BCP) requires the transfer of its customer information systems to an overseas cloud service provider in the event of a disaster. Which of the following should be the MOST important risk consideration?

    Correct Answer: A

    The most important risk consideration is the lack of a service level agreement (SLA) in the vendor contract. An SLA is crucial because it sets the expectations for the service quality, availability, and responsibilities of the cloud service provider. Without an SLA, there is no formal assurance of how the service provider will perform during a disaster, which is vital for business continuity in a global company.

Discussion
Silvias4Option: A

lack of a service level agreement (SLA) bigger risk

CbtLOption: A

Agree it is A.

abhincarnationOption: B

B - bigger risk of confidential data being shared.

mynk29Option: B

A shared environment is a much bigger risk than SLA to my mind.