The MAIN difference between Cloud Control Matrix (CCM) and Consensus Assessment Initiative Questionnaire (CAIQ) is that:
A.
CCM assesses the presence of controls, whereas CAIQ assesses overall security of a service.
B.
CCM has a set of security questions, whereas CAIQ has a set of security controls.
C.
CCM has 14 domains and CAIQ has 16 domains.
D.
CCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document which security controls exist in IaaS, PaaS, and SaaS offerings.
D. CCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document which security controls exist in IaaS, PaaS, and SaaS offerings.
The Cloud Control Matrix (CCM) is a comprehensive framework of security controls that are designed to address various aspects of cloud security across different service models (IaaS, PaaS, SaaS). It provides a structured approach to identifying and implementing necessary security measures.
On the other hand, the Consensus Assessment Initiative Questionnaire (CAIQ) is a tool that helps cloud customers assess the security capabilities of cloud service providers. It includes a set of questions that are mapped to the CCM controls, allowing providers to document and communicate their security practices and controls in a standardized way.
CAIQ- an industry-accepted way of documenting the security and privacy controls that exist in cloud services provides security control transparency and, to some extent, assurance.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CCAK Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Auditor2020
1 month, 3 weeks ago339dfab
6 months, 2 weeks ago