CCAK Question 13

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  D. CSP can direct all customers’ inquiries to the information in the CSA STAR registry. The CSA STAR registry is a publicly accessible platform that provides detailed information about the security controls and certifications of cloud service providers. By directing customers to this registry, the CSP can efficiently offer comprehensive security information, thus minimizing the need to individually address each inquiry or request for proposal (RFP). This approach streamlines the process and effectively reduces the CSP's workload.

• Chose D2

  CSA STAR program allows organizations to be more transparent and reduce the number of security questionnaires they must provide for individual customers. One way they can do this is by completing the CAIQ and submitting it to the STAR regustry, a free, publicly accessible registry that documents the security controls provided by CSPs (p.183)