CISM Daily Quiz: Securing Confidential Data in Multi-Tenant Cloud Environments ☁️

Today’s CISM Question of the Day:
An organization wants to ensure its confidential data is isolated in a multi-tenant environment at a cloud service provider. What’s the BEST way to ensure the data is adequately protected?

👉 Options:
A. Verify the provider follows a framework standard
B. Review the provider’s security policies
C. Obtain encryption documentation
D. Ensure an audit of the provider is conducted

✅ Correct Answer: D. Ensure an audit of the provider is conducted to identify control gaps

Reasoning:

Policies, documentation, and frameworks show intent, but not effectiveness.

An independent audit provides the strongest assurance that security controls are operating as expected.

💡 Exam Tip:
In CISM, the BEST assurance almost always points to independent validation such as audits, certifications, or third-party reviews.

#CISM #ISACA #CyberSecurity #CloudSecurity #IncidentResponse #CISMQuestionOfTheDay