CCSK · Question #174
CCM: In the Identity & Access Management (IAM) domain, what does the number '04' in IAM-04 signify?
The correct answer is C. It is the 4th control in the IAM domain. In the Cloud Controls Matrix (CCM), the number in a control ID like IAM-04 indicates the sequential position of that control within its domain, not a count or random value.
Question
CCM: In the Identity & Access Management (IAM) domain, what does the number '04' in IAM-04 signify?
Options
- AThere are 4 controls in that particular domain
- BThe control ID is a random number assigned to the control
- CIt is the 4th control in the IAM domain
- DNone of the above
How the community answered
(28 responses)- A7% (2)
- B11% (3)
- C79% (22)
- D4% (1)
Why each option
In the Cloud Controls Matrix (CCM), the number in a control ID like IAM-04 indicates the sequential position of that control within its domain, not a count or random value.
The number does not represent the total count of controls in the IAM domain; the IAM domain contains more than four controls in the CCM.
CCM control IDs follow a deliberate, structured sequential convention and are never randomly assigned.
The CCM uses a structured naming convention where the domain abbreviation is paired with a sequential number indicating that control's order within the domain. IAM-04 therefore refers to the fourth control listed in the Identity and Access Management domain. This convention allows auditors and practitioners to locate and reference specific controls quickly and unambiguously.
One of the above choices is correct, making 'None of the above' incorrect.
Concept tested: CCM control ID sequential naming convention
Source: https://cloudsecurityalliance.org/research/cloud-controls-matrix/
Topics
Community Discussion
No community discussion yet for this question.