Certificate of Cloud Auditing Knowledge (CCAK) — Question 236

Which industry organization offers both security controls and cloud-relevant benchmarking?

Answer options

• A. Cloud Security Alliance (CSA)
• B. SANS Institute
• C. International Organization for Standardization (ISO)
• D. Center for Internet Security (CIS)

Correct answer: A

Explanation

The Cloud Security Alliance (CSA) is specifically focused on cloud security and provides both security controls and benchmarking for cloud services. The SANS Institute primarily offers training and certifications in cybersecurity, while ISO develops international standards without a specific focus on cloud. The Center for Internet Security (CIS) offers benchmarks, but they are not exclusively tailored to cloud environments.