Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

The correct answer is D. Budgetary and cost controls. The Cloud Controls Matrix (CCM), published by the Cloud Security Alliance (CSA), includes domains such as Data Center Security, Human Resources, Mobile Security, Encryption & Key Management, Identity & Access Management, and others-all focused on cybersecurity and compliance. 'Bu

Submitted by lars.no· Apr 18, 2026Legal, Risk and Compliance

Question

Options

AData center security
BHuman resources
CMobile security
DBudgetary and cost controls

How the community answered

(48 responses)

A
6% (3)
B
4% (2)
C
2% (1)
D
88% (42)

Explanation

The Cloud Controls Matrix (CCM), published by the Cloud Security Alliance (CSA), includes domains such as Data Center Security, Human Resources, Mobile Security, Encryption & Key Management, Identity & Access Management, and others-all focused on cybersecurity and compliance. 'Budgetary and cost controls' is not a domain in the CCM, as the matrix is a security-focused framework and does not address financial budgeting or cost management. The other three options (data center security, human resources, and mobile security) are legitimate CCM domains.

Topics

#Cloud Controls Matrix (CCM)#CSA#Security frameworks#Compliance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice