Certbie
Log InSign Up
Question 1 of 30
Jean-Pierre Dubois, the IT director of \"Alpine Manufacturing,\" is considering migrating the company\'s enterprise resource planning (ERP) system to a hybrid cloud environment. Alpine Manufacturing processes sensitive supply chain and financial data, subject to strict regulatory requirements. Jean-Pierre needs to ensure that the cloud migration adheres to ISO 27017:2015 and maintains the confidentiality, integrity, and availability of the ERP data. Which of the following steps would be the MOST effective in achieving this goal?
Conduct a comprehensive risk assessment specific to the hybrid cloud environment, clearly defining security responsibilities between Alpine Manufacturing and the cloud provider, implementing strong encryption and access controls for all ERP data, and establishing robust monitoring and incident response procedures, while ensuring compliance with relevant regulations.
Assume that the cloud provider is solely responsible for the security of the ERP system once it is migrated to the hybrid cloud.
Focus primarily on securing Alpine Manufacturing's on-premise infrastructure, neglecting the specific security considerations within the cloud portion of the hybrid environment.
Implement a standard set of security policies without tailoring them to the specific risks and vulnerabilities associated with the hybrid cloud environment and the ERP system.