Exam CCAK topic 1 question 47 discussion

Shoud be D. The CCM allows cloud customers to build a detailed list of requirements and controls they want their CSP to implement as part of their overall third-party risk management and procurement program. It also helps normalize security expectations, provide a cloud taxonomy, and improve understanding of the security measures implemented in the cloud supply chain.

D. No. CCM can serve as a foundation for a cloud assessment program, but it needs to be completed with requirements applicable to each company. While the Cloud Controls Matrix (CCM) provides a comprehensive framework for cloud security and helps in building a detailed list of requirements and controls, it should be supplemented with specific requirements tailored to each company's unique needs and regulatory environment. This ensures a more accurate and comprehensive risk assessment and management strategy.

CCM doesn't have GDPR so D

Agreed D

Agree with both above voters.

I go with D