A cloud engineer is creating a configuration standard to be used on all new cloud deployments. The document should include best practices designed by industry experts. Which of the following is the…

Question

Options

• ADownload the ISO 27001 certification document and certify the company's deployment process.
• BVerify the availability of a CIS benchmark for each in-scope technology
• CRequest from the management team a budget to initiate a SOC 2 attestation
• DInvite professionals from the local IT community to contribute to the document

• A
  6% (2)
• B
  56% (19)
• C
  24% (8)
• D
  15% (5)

Explanation

CIS (Center for Internet Security) Benchmarks are detailed, technology-specific configuration guides developed by security experts and industry consensus. They provide prescriptive best practices for hardening systems, making them the optimal foundation for a cloud deployment configuration standard. ISO 27001 is a broad information security management framework and certification process-not a granular technical configuration guide. SOC 2 is an audit attestation for service organizations about controls, not a deployment how-to. Soliciting local IT community input lacks the rigor, authority, and industry-wide consensus that CIS Benchmarks provide.

No community discussion yet for this question.