Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of…

Question

Options

• AOperations Maintenance
• BSystem Development Maintenance
• CEquipment Maintenance
• DSystem Maintenance

• A
  86% (32)
• B
  3% (1)
• C
  8% (3)
• D
  3% (1)

Explanation

Operations Maintenance (A) is correct because the control description specifically emphasizes maintaining continuity and availability of operations and support personnel - a holistic concern that spans policies, procedures, business processes, and technical measures across the operational environment. This broad scope aligns with "Operations Maintenance" as a control category in frameworks like CSA CCM (Cloud Controls Matrix).

System Development Maintenance (B) is too narrow - it focuses on the software development lifecycle and changes to systems during development, not ongoing operational continuity.

Equipment Maintenance (C) is also too narrow - it targets physical hardware upkeep, while the question explicitly includes business processes and support personnel, which are not equipment concerns.

System Maintenance (D) is close but insufficient - it covers patching and updating systems, but doesn't encompass the full breadth of personnel continuity and business process elements described in the question.

Memory tip: When you see a control that combines policies + procedures + business processes + technical measures + personnel continuity, think Operations - it's the umbrella term. "System" and "Equipment" controls are always more specific subsets underneath it.

No community discussion yet for this question.