Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments. Which of the following would NOT be a major focus of…

The correct answer is D. Data custodian. The jurisdictions where data is being stored, processed, or consumed are the ones that dictate the regulatory frameworks and compliance requirements, regardless of who the data owner or custodian might be. The other concepts for protecting data would all play a prominent role…

Submitted by cyberguy42· Apr 18, 2026Legal, Risk and Compliance

Question

Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments. Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?

Options

AData in transit
BData in use
CData at rest
DData custodian

How the community answered

(51 responses)

A
6% (3)
B
2% (1)
C
2% (1)
D
90% (46)

Explanation

The jurisdictions where data is being stored, processed, or consumed are the ones that dictate the regulatory frameworks and compliance requirements, regardless of who the data owner or custodian might be. The other concepts for protecting data would all play a prominent role in regulatory compliance with a move to the cloud environment. Each concept needs to be evaluated based on the new configurations as well as any potential changes in jurisdiction or requirements introduced with the move to a cloud.

Topics

#Regulatory Compliance#Cloud Data Security#Data States#Roles and Responsibilities

Community Discussion

No community discussion yet for this question.

Full CCSP Practice