Certificate of Cloud Auditing Knowledge (CCAK) — Question 27

Cloud Control Matrix (CCM) controls can be used by cloud customers to:

Answer options

• A. develop new security baselines for the industry.
• B. define different control frameworks for different cloud service providers.
• C. facilitate communication with their legal department.
• D. build an operational cloud risk management program.

Correct answer: D

Explanation

The correct answer, D, is valid because the CCM provides a structured approach to managing risks associated with cloud services, essential for building an operational risk management program. Options A, B, and C are not correct as they do not directly relate to the primary function of the CCM in risk management.