Which of the following best describes the Organizational Normative Framework (ONF)?

The correct answer is D. A framework of containers for all components of application security, best practices, catalogued. The ONF is a comprehensive framework of containers that covers ALL components of application security best practices, catalogued and leveraged by the organization. Option A omits the 'container' structure that defines the ONF's architecture. Option B describes only an…

Submitted by lukas.cz· Apr 18, 2026Cloud Application Security

Question

Options

AA set of application security, and best practices, catalogued and leveraged by the organization
BA container for components of an application's security, best practices catalogued and leveraged
CA framework of containers for some of the components of application security, best practices,
DA framework of containers for all components of application security, best practices, catalogued

How the community answered

(50 responses)

A
8% (4)
B
2% (1)
C
2% (1)
D
88% (44)

Explanation

The ONF is a comprehensive framework of containers that covers ALL components of application security best practices, catalogued and leveraged by the organization. Option A omits the 'container' structure that defines the ONF's architecture. Option B describes only an application-level container, not the organizational level. Option C says 'some' components, which is inaccurate-the ONF is meant to be exhaustive. Option D correctly identifies the ONF as organization-wide, container-based, and covering all components, making it the most precise and complete description.

Topics

#Organizational Normative Framework#Application Security#Security Frameworks#Best Practices

Community Discussion

No community discussion yet for this question.

Full CCSP Practice