A company is planning a cloud migration and wants to strengthen its organizational capabilities for managing migration-related risks and ensuring compliance. Which perspective of the AWS Cloud Adoption Framework (AWS CAF) does this correspond to?

1 / 1
Select an answer
CorrectB

Explanation

A question asking for the CAF perspective that covers risk management and compliance.

  • 1managing migration-related risks and ensuring complianceA domain related to organizational control (governance) capabilities
  • 2AWS CAFA cloud adoption framework that organizes cloud adoption into six perspectives
AIncorrect

Business perspective

This is incorrect. The Business perspective covers capabilities (such as strategy and product management) that ensure cloud investments translate into business outcomes and value. Its focus is business value, not risk management and compliance controls — those belong to the Governance perspective.

BCorrect

Governance perspective

Correct. The Governance perspective covers the capabilities needed to manage risk, ensure compliance, and oversee benefits management — controlling cloud adoption as an organization. Managing risks associated with migration and strengthening the ability to meet regulatory requirements correspond to this perspective.

CIncorrect

Security perspective

This is incorrect. The Security perspective covers the technical and operational capabilities (such as IAM, threat detection, and data protection) needed to ensure the confidentiality, integrity, and availability of data and workloads. The focus of this question is organizational risk management and compliance controls, which belong to the Governance perspective.

DIncorrect

Operations perspective

This is incorrect. The Operations perspective covers capabilities for running cloud services at the level the business requires (such as monitoring and incident response). Its focus is day-to-day operations, whereas risk management and compliance in the context of migration belong to the Governance perspective.

Key Takeaway

The 6 CAF perspectives: Business (business value) / People (people and culture — bridging technology and business) / Governance (risk management and compliance) / Platform (technical foundation) / Security (data protection) / Operations (operations). 'Risk' and 'control' point to Governance; 'organization, skills, culture' point to People.