Certificate of Cloud Auditing Knowledge (CCAK) — Question 103

Which of the following has been provided by the Federal Office for Information Security in Germany to support customers in selecting, controlling, and monitoring their cloud service providers?

Answer options

• A. German IDW PS 951
• B. Multi-Tier Cloud Security (MTCS)
• C. BSI Criteria Catalogue C5
• D. BSI IT-basic protection catalogue

Correct answer: C

Explanation

The correct answer, C. BSI Criteria Catalogue C5, specifically aids customers in evaluating and managing cloud service providers. Options A and D relate to different frameworks for IT security but do not focus specifically on cloud services. Option B is a separate cloud security framework that does not originate from the BSI.