From the course: Cloud Security Operations by Pearson

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Provider risk assessment programs

Provider risk assessment programs

From the course: Cloud Security Operations by Pearson

Start my 1-month free trial Buy for my team

Provider risk assessment programs

“

On this exam, the primary provider risk assessment program is the Cloud Security Alliance Cloud Controls Matrix, or CCM. You have to be knowledgeable of the CCM on the exam. Now, it includes 197 control objectives organized into 17 domains covering all main aspects of cloud technology. Do you have to have a deep dive knowledge on this exam? By no means. This is not a CSA exam, it's ISC squared. But these controls are widely used for the systematic assessment of cloud provider implementations. The CSA CCM provides guidance on which security controls should be implemented by which actor within the cloud supply chain. The CCM is established as the de facto standard for cloud security assurance and compliance. Integrated into the CCM is the Consensus Assessment Initiative Questionnaire, or CAIQ. We have the Star Level 1. This is a security questionnaire repository, so it offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and software-as-a-services. In…

Contents