Certified Cloud Security Professional (CCSP) — Question 71

Legal controls refer to which of the following?

Answer options

• A. ISO 27001
• B. PCI DSS
• C. NIST 800-53r4
• D. Controls designed to comply with laws and regulations related to the cloud environment

Correct answer: D

Explanation

The correct answer is D because legal controls specifically relate to compliance with laws and regulations in the cloud context. Options A, B, and C refer to various standards and frameworks that may include legal aspects but do not define legal controls directly.