Cloud Control Matrix (CCM) controls can be used by cloud customers to:

The correct answer is B. define different control frameworks for different cloud service providers. The CSA Cloud Control Matrix (CCM) is a cybersecurity control framework specifically designed for cloud computing. One of its primary values is that it is provider-agnostic and maps to many different standards (ISO 27001, PCI DSS, NIST, etc.), allowing cloud customers to define…

Cloud Compliance

Question

Options

Adevelop new security baselines for the industry.
Bdefine different control frameworks for different cloud service providers.
Cfacilitate communication with their legal department.
Dbuild an operational cloud risk management program.

How the community answered

(41 responses)

A
2% (1)
B
90% (37)
C
5% (2)
D
2% (1)

Explanation

The CSA Cloud Control Matrix (CCM) is a cybersecurity control framework specifically designed for cloud computing. One of its primary values is that it is provider-agnostic and maps to many different standards (ISO 27001, PCI DSS, NIST, etc.), allowing cloud customers to define and apply different control expectations when evaluating or comparing different cloud service providers. It gives customers a standardized vocabulary and control set to assess each CSP against, effectively enabling them to define the applicable control framework per provider. Option A is incorrect because the CCM is itself the established baseline, not a tool for customers to create new ones. Option D, while related, describes an output of using CCM rather than its direct mechanism.

Topics

#Cloud Control Matrix (CCM)#Cloud Compliance#Control Frameworks#Cloud Service Providers (CSPs)

Community Discussion

No community discussion yet for this question.

Full CCAK Practice