CCAK: Certificate of Cloud Auditing Knowledge

By Isaca · Question Mode

QuestionQ23

VerifiedCCM and CAIQ: Goals, Objectives, and Structure

Which of the following standards is intended for organizations using cloud services that plan to select controls while implementing an information security management system based on ISO/IEC 27001?

Explanation

ISO/IEC 27017:2015 provides cloud-specific information security controls and implementation guidance for cloud service providers and customers. It supplements the general controls in ISO/IEC 27002 and can support control selection for an ISO/IEC 27001-based ISMS. The 2015 edition has since been withdrawn and replaced by ISO/IEC 27017:2026. (iso.org)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!