Certificate of Cloud Auditing Knowledge (CCAK) — Question 205

The Cloud Computing Compliance Controls Catalogue (C5) framework is maintained by which of the following agencies?

Answer options

• A. Agence nationale de la sécurité des systèmes d’information (ANSSI)
• B. National Institute of Standards and Technology (NIST)
• C. National Security Agency (NSA)
• D. Bundesamt für Sicherheit in der Informationstechnik (BSI)

Correct answer: D

Explanation

The correct answer is D, as the Bundesamt für Sicherheit in der Informationstechnik (BSI) is indeed the agency that maintains the C5 framework. Options A, B, and C are incorrect because they refer to different organizations that handle various aspects of security and standards but are not responsible for the C5 framework.