CCSP · Question #78
Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?
The correct answer is A. Financial. The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) defines various security control domains, but 'Financial' is not one of them.
Question
Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?
Options
- AFinancial
- BHuman resources
- CMobile security
- DIdentity and access management
How the community answered
(13 responses)- A92% (12)
- C8% (1)
Why each option
The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) defines various security control domains, but 'Financial' is not one of them.
'Financial' is not a defined security control domain within the Cloud Controls Matrix (CCM) published by the Cloud Security Alliance; the CCM primarily focuses on technical, operational, and organizational security aspects.
'Human resources' (HRM) is a defined domain in the CCM, covering personnel security and training aspects.
'Mobile security' (MOS) is a defined domain in the CCM, addressing security considerations for mobile devices and applications.
'Identity and access management' (IAM) is a fundamental and prominent domain within the CCM, covering user authentication and authorization controls.
Concept tested: CSA Cloud Controls Matrix (CCM) domains
Source: https://cloudsecurityalliance.org/research/cloud-controls-matrix/
Topics
Community Discussion
No community discussion yet for this question.