Which of the following parties should have accountability for cloud compliance requirements?

The correct answer is B. Equally shared between customer and provider. Cloud compliance is governed by the shared responsibility model. Neither the customer nor the provider bears sole accountability. The cloud service provider is responsible for compliance related to the underlying infrastructure, physical security, and platform controls (e.g…

Cloud Compliance

Question

Options

ACustomer
BEqually shared between customer and provider
CProvider
DEither customer or provider, depending on requirements

How the community answered

(28 responses)

B
96% (27)
D
4% (1)

Explanation

Cloud compliance is governed by the shared responsibility model. Neither the customer nor the provider bears sole accountability. The cloud service provider is responsible for compliance related to the underlying infrastructure, physical security, and platform controls (e.g., hypervisor, network). The customer is responsible for compliance related to how they configure and use cloud services - including data governance, identity management, and application-level controls. Regulatory requirements (e.g., GDPR, HIPAA, PCI DSS) apply to both parties for their respective domains. Therefore, accountability is equally shared between customer and provider.

Topics

#Cloud compliance#Shared responsibility model#Cloud accountability#Compliance requirements

Community Discussion

No community discussion yet for this question.

Full CCAK Practice