A Dot Release of Cloud Control Matrix (CCM) indicates what?

The correct answer is A. The introduction of new control frameworks mapped to previously-published CCM controls. In CSA's versioning terminology, a 'Dot Release' (e.g., CCM v3.0.1) specifically indicates that new external control frameworks have been mapped to the existing, previously-published CCM controls - expanding interoperability without restructuring the core controls. It is not a…

Cloud Compliance

Question

Options

AThe introduction of new control frameworks mapped to previously-published CCM controls.
BA revision of the CCM domain structure.
CA technical change (revision or addition or deletion) of a number of controls is smaller than 10%
DA technical change (revision or addition or deletion) of a number of controls is greater than 10%

How the community answered

(35 responses)

A
89% (31)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

In CSA's versioning terminology, a 'Dot Release' (e.g., CCM v3.0.1) specifically indicates that new external control frameworks have been mapped to the existing, previously-published CCM controls - expanding interoperability without restructuring the core controls. It is not a major revision (which would alter domain structure or change more than 10% of controls). Options C and D describe quantitative thresholds used to distinguish minor vs. major technical changes, while Option B describes a structural revision - both of which would require a full version increment, not a dot release.

Topics

#Cloud Control Matrix (CCM)#CCM Versioning#Control Frameworks#CSA

Community Discussion

No community discussion yet for this question.

Full CCAK Practice