Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. CCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document which security controls exist in IaaS, PaaS, and SaaS offerings. The Cloud Control Matrix (CCM) is a comprehensive framework of security controls that are designed to address various aspects of cloud security across different service models (IaaS, PaaS, SaaS). It provides a structured approach to identifying and implementing necessary security measures. On the other hand, the Consensus Assessment Initiative Questionnaire (CAIQ) is a tool that helps cloud customers assess the security capabilities of cloud service providers. It includes a set of questions that are mapped to the CCM controls, allowing providers to document and communicate their security practices and controls in a standardized way.
CAIQ- an industry-accepted way of documenting the security and privacy controls that exist in cloud services provides security control transparency and, to some extent, assurance.