ITIL4F Four Dimensions of IT Service Management Practice Question
A company is migrating its CRM system to the cloud. Which ITIL 4 dimension is primarily concerned with ensuring the cloud provider's security measures meet the organization's requirements?
⚠ Common exam trap
Watch out — candidates often confuse 'Information and Technology' with security requirements, but ITIL 4 explicitly places third-party security compliance under the Partners and Suppliers dimension, not the technology layer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Partners and Suppliers
The Partners and Suppliers dimension is correct because it specifically addresses the management of external relationships, contracts, and third-party services. When migrating a CRM system to the cloud, the security requirements of the organization must be formally agreed upon and enforced through the cloud provider's contractual obligations, SLAs, and compliance certifications (e.g., ISO 27001, SOC 2). This dimension ensures that the provider's security controls align with the organization's policies, not just the technology itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Organisations and People
Why it's wrong here
This dimension focuses on the internal structure, culture, and capabilities of an organization, including roles, responsibilities, and communication. While internal staff will manage the cloud migration project and interact with the provider, this dimension does not directly govern the contractual or relational aspects with the external cloud service provider itself. It ensures the internal team is prepared and skilled, but not the external partnership.
- ✗
Information and Technology
Why it's wrong here
This dimension encompasses the information and knowledge required to deliver services, along with the technologies, applications, and infrastructure used. It addresses the technical architecture, data management, and security of the CRM system being migrated. However, it does not cover the commercial agreements, service level management, or the overarching relationship governance with the external cloud vendor providing the infrastructure and platform.
- ✗
Value Streams and Processes
Why it's wrong here
This dimension describes how an organization creates, delivers, and consumes value through specific activities and workflows. It would define the steps involved in the CRM migration project or the operational processes for using the new cloud CRM. While crucial for execution, this dimension does not directly manage the strategic engagement, contractual obligations, or performance monitoring of the external cloud provider as a distinct entity.
- ✓
Partners and Suppliers
Why this is correct
This dimension explicitly addresses the relationships an organization has with external entities that are involved in the design, development, deployment, delivery, support, and continual improvement of services. For a cloud CRM migration, this dimension is critical for managing the selection, contracting, performance, and security requirements with the cloud service provider. It ensures effective collaboration, risk management, and adherence to service level agreements with the external partner.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ITIL4F question from scratch — 805 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.