A.Privileged access to critical information systems requiring a second factor of authentication using soft token

B.Unsuccessful access attempts being automatically logged for investigation

C.A central anti-virus system installing the latest signature files before allowing a connection to the network

D.All new employees having standard access rights until their manager approves privileged rights

A.value chain analysis

B.risk framework

C.balanced scorecard

D.control self-assessment (CSA)

A.Conduct a due diligence to verify the cloud provider applies adequate physical security measures.

B.Implement physical security perimeters to safeguard personnel, data and information systems.

C.Review internal policies and procedures for relocation of hardware and software to an offsite location.

D.Assess use of monitoring systems to control ingress and egress points of entry to the data center.

A.develop a cloud audit plan on the basis of a detailed risk assessment.

B.schedule the audits and monitor the time spent on each audit.

C.train the cloud audit staff on current technology used in the organization.

D.monitor progress of audits and initiate cost control measures.

A.Use existing, provide many times

B.Use often, provide many times

C.Do once, use many times

D.Be economical, act deliberately