CISM Question of the Day | Cloud Security & Audits | ISACA Exam Prep

Today’s CISM Question of the Day: An organization wants to ensure its confidential data is isolated in a multi-tenant environment at a cloud service provider. What’s the BEST way to ensure the data is adequately protected? 👉 Options: A. Verify the provider follows a framework standard B. Review the provider’s security policies C. Obtain encryption documentation D. Ensure an audit of the provider is conducted ✅ Correct Answer: D. Ensure an audit of the provider is conducted to identify control gaps Reasoning: Policies, documentation, and frameworks show intent, but not effectiveness. An independent audit provides the strongest assurance that security controls are operating as expected. 💡 Exam Tip: In CISM, the BEST assurance almost always points to independent validation such as audits, certifications, or third-party reviews. #CISM #ISACA #CyberSecurity #CloudSecurity #IncidentResponse #CISMQuestionOfTheDay