Exam CCAK topic 1 question 30 discussion

Cloud Control Matrix (CCM) controls can be used by cloud customers to: D. build an operational cloud risk management program. The Cloud Control Matrix (CCM) provides a set of controls designed to help cloud customers manage and assess the security and compliance risks associated with cloud services, aiding in the development of a robust operational risk management program.

p. 182, CCAK Study Guide - "Cloud customers can use the CCM controls to do the following: • Map organizational, operational and legal requirements to control objectives. • Build an operational cloud risk management program. • Build a third-party risk management program. • Build an internal and external cloud audit plan."

Should be D

Since question is specific to cloud customer, page 182 calls out building operational cloud risk management as an option

B. Pag 180 CCAK Study Guide.

Should be D, build operational risk