CCSP · Question #23
You are the security policy lead for your organization, which is considering migrating from your on- premises, legacy environment into the cloud. You are reviewing the Cloud Security Alliance Cloud…
The correct answer is A. Simplifying regulatory compliance. The CSA CCM provides a comprehensive framework of security controls and guidelines designed to assist organizations in assessing and managing cloud security risks.
Question
You are the security policy lead for your organization, which is considering migrating from your on- premises, legacy environment into the cloud. You are reviewing the Cloud Security Alliance Cloud Controls Matrix (CSA CCM) as a tool for your organization. Which of the following benefits will the CSA CCM offer your organization?
Options
- ASimplifying regulatory compliance
- BCollecting multiple data streams from your log files
- CEnsuring that the baseline configuration is applied to all systems
- DEnforcing contract terms between your organization and the cloud provider
How the community answered
(31 responses)- A94% (29)
- B3% (1)
- C3% (1)
Why each option
The CSA CCM provides a comprehensive framework of security controls and guidelines designed to assist organizations in assessing and managing cloud security risks.
The Cloud Security Alliance Cloud Controls Matrix (CSA CCM) is a cybersecurity control framework that maps to various industry regulations, standards, and frameworks (e.g., ISO 27001, NIST, HIPAA). By providing a standardized set of cloud-specific security controls, the CSA CCM simplifies the daunting task of understanding and meeting diverse regulatory compliance requirements when migrating to or operating in the cloud.
The CSA CCM is a control framework, not a tool for collecting data streams from log files, which is typically handled by SIEM or logging solutions.
While the CSA CCM includes controls related to configuration management, its primary benefit is not direct enforcement of baseline configurations on systems, but rather providing a framework for defining and assessing those controls.
Enforcing contract terms between an organization and a cloud provider is done through legal agreements and service level agreements (SLAs), not directly by the CSA CCM framework.
Concept tested: CSA Cloud Controls Matrix benefits
Source: https://cloudsecurityalliance.org/research/cloud-controls-matrix/
Topics
Community Discussion
No community discussion yet for this question.