CCAK · Question #96
Which of the following is a direct benefit of mapping the Cloud Control Matrix (CCM) to other international standards and regulations?
The correct answer is B. CCM mapping enables cloud service providers and customers alike to streamline their own. One of the primary design goals of the CSA CCM is cross-mapping to major standards and regulations such as ISO 27001, NIST SP 800-53, PCI DSS, HIPAA, and GDPR. This cross-mapping allows cloud service providers and their customers to conduct a single controls assessment and then…
Question
Which of the following is a direct benefit of mapping the Cloud Control Matrix (CCM) to other international standards and regulations?
Options
- ACCM mapping entitles cloud service providers to be listed as an approved supplier for tenders and
- BCCM mapping enables cloud service providers and customers alike to streamline their own
- CCCM mapping enables an uninterrupted data flow and, in particular, the export of personal data
- DCCM mapping entitles cloud service providers to be certified under the CSA STAR program.
How the community answered
(68 responses)- A1% (1)
- B91% (62)
- C4% (3)
- D3% (2)
Explanation
One of the primary design goals of the CSA CCM is cross-mapping to major standards and regulations such as ISO 27001, NIST SP 800-53, PCI DSS, HIPAA, and GDPR. This cross-mapping allows cloud service providers and their customers to conduct a single controls assessment and then map the results to multiple compliance frameworks simultaneously, dramatically reducing duplication of effort. Instead of running separate audits for each regulation, organizations can use the CCM as a common language. Options A and D describe specific program outcomes (supplier listing, STAR certification) that are not direct results of the mapping itself, and option C conflates compliance mapping with data flow legality.
Topics
Community Discussion
No community discussion yet for this question.