The MAIN difference between Cloud Control Matrix (CCM) and Consensus Assessment Initiative Questionnaire (CAIQ) is that:

The correct answer is D. CCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document. The CSA Cloud Control Matrix (CCM) is a cybersecurity control framework specifically designed for cloud computing. It defines a set of security controls organized across 17 domains. The Consensus Assessment Initiative Questionnaire (CAIQ) is built on top of the CCM and provides…

Cloud Compliance

Question

Options

ACCM assesses the presence of controls, whereas CAIQ assesses overall security of a service.
BCCM has a set of security questions, whereas CAIQ has a set of security controls.
CCCM has 14 domains and CAIQ has 16 domains.
DCCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document

How the community answered

(25 responses)

A
4% (1)
D
96% (24)

Explanation

The CSA Cloud Control Matrix (CCM) is a cybersecurity control framework specifically designed for cloud computing. It defines a set of security controls organized across 17 domains. The Consensus Assessment Initiative Questionnaire (CAIQ) is built on top of the CCM and provides a standardized set of questions that cloud service providers can answer to document and disclose their security capabilities to customers and auditors. In other words, CCM defines WHAT controls should exist, while CAIQ defines HOW providers should self-attest and communicate the presence (or absence) of those controls. Options A and B invert or confuse the roles; option C incorrectly describes the domain counts.

Topics

#Cloud Control Matrix (CCM)#Consensus Assessment Initiative Questionnaire (CAIQ)#CSA#Security Frameworks

Community Discussion

No community discussion yet for this question.

Full CCAK Practice