CAS-005 · Question #326
A CRM company leverages a CSP PaaS service to host and publish Its SaaS product. Recently, a large customer requested that all infrastructure components must meet strict regulatory requirements…
The correct answer is A. The CRM company. In a PaaS (Platform as a Service) model, the Cloud Service Provider (CSP) is responsible for managing the platform infrastructure, including servers, storage, and the platform software. However, the CRM company, as the customer of the PaaS provider, is responsible for managing…
Question
A CRM company leverages a CSP PaaS service to host and publish Its SaaS product. Recently, a large customer requested that all infrastructure components must meet strict regulatory requirements, including configuration management, patch management, and life-cycle management. Which of the following organizations is responsible for ensuring those regulatory requirements are met?
Options
- AThe CRM company
- BThe CRM company's customer
- CThe CSP
- DThe regulatory body
How the community answered
(48 responses)- A90% (43)
- B6% (3)
- C2% (1)
- D2% (1)
Explanation
In a PaaS (Platform as a Service) model, the Cloud Service Provider (CSP) is responsible for managing the platform infrastructure, including servers, storage, and the platform software. However, the CRM company, as the customer of the PaaS provider, is responsible for managing and securing their own application, data, and any configurations or compliance requirements for their hosted SaaS product. Since the CRM company provides the SaaS product to their customers and regulatory compliance is a business requirement for their service, they bear the responsibility to ensure that their application and infrastructure configurations meet regulatory requirements, even if hosted on the CSP's platform.
Community Discussion
No community discussion yet for this question.