Exam CCSP topic 1 question 127 discussion

https://cloudsecurityalliance.org/research/cloud-controls-matrix/ Answer is D

The Cloud Controls Matrix (CCM) is a cybersecurity control framework developed by the Cloud Security Alliance (CSA). It includes domains that address various security aspects of cloud computing, but budgetary and cost controls are not part of its focus. The CCM is designed to ensure cloud security, not financial management. Why the other options are part of CCM: A. Data center security → This falls under Infrastructure & Virtualization Security (IVS) and Facility Security (FS) domains in CCM. B. Human resources → Covered under Human Resources Security (HRS), which deals with security policies for employees. C. Mobile security → Addressed under Mobile Security (MOS), ensuring security for mobile and endpoint devices.

It's D. Budgetary and cost controls are not included in the Cloud Controls Matrix (CCM), which focuses on security, compliance, and risk management rather than financial aspects.

B: Human resources

D is the correct answer.

The domain that is NOT a part of the Cloud Controls Matrix (CCM) is B. Human resources. The Cloud Controls Matrix (CCM) is a set of controls designed to provide fundamental security principles to guide cloud vendors and to assist customers in assessing the overall security risk of a cloud provider. The domains of CCM include: A. Data Center Security: Covers the physical and environmental security of the cloud provider's data center. C. Mobile Security: Deals with security considerations for mobile devices, such as smartphones and tablets. D. Budgetary and Cost Controls: Addresses the budgetary and cost controls of the cloud provider, such as pricing, billing, and chargeback. Therefore, option B, Human resources, is not a domain of the Cloud Controls Matrix (CCM

come on

why not Human Resources?