CISA Certified Information Systems Auditor – Question0360

A security review focused on data loss prevention (DLP) revealed the organization has no visibility to data stored in the cloud. What is the IS auditor’s BEST recommendation to address this issue?

A.
Implement a file system scanner to discover data stored in the cloud.
B. Utilize a DLP tool on desktops to monitor user activities.
C. Employ a cloud access security broker (CASB).
D. Enhance the firewall at the network perimeter.

Correct Answer: C