CloudNova AI Solutions experienced exposure of proprietary artificial intelligence models because of misconfigured cloud storage. Which governance response best fits the profile?
Answer
Improve cloud governance awareness and educate leadership to protect intellectual property
Explanation
### Why this is right
CloudNova's profile identifies misconfigured cloud storage as the incident and names governance frameworks and leadership education as improvement priorities. The exposed models were proprietary, so protecting intellectual property is directly relevant.
### The concept
Using a framework does not guarantee that every system is configured correctly. Governance must connect expectations to awareness, leadership, and operational practice. Cloud environments can hold valuable organizational information, making oversight and knowledge of cloud governance relevant to risk management.
### The other options
- **B. Treat the incident only as a failure of employee password choice**: the profile identifies cloud-storage misconfiguration, not password choice.
- **C. Stop reviewing cloud arrangements because the company already uses frameworks**: frameworks do not remove the need for continued oversight.
- **D. Assume that framework use guarantees correct cloud configuration**: the incident demonstrates that governance gaps can exist even when a company reports using frameworks.
### Terms
- **Cloud storage**: Online storage services used to hold information or digital resources.
- **Intellectual property**: Valuable creations or information owned or developed by an organization.
- **Misconfiguration**: An incorrect or unsafe setting in a system or service.
### Remember
A framework guides governance; it does not guarantee that systems are configured correctly.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free