CCAK: Certificate of Cloud Auditing Knowledge

Question

An organization currently following the ISO/IEC 27002 control framework has been directed by a new CIO to switch to the NIST 800-53 control framework.

Which of the following is the FIRST step in making this change?

Explanation

Mapping the existing ISO/IEC 27002 controls to NIST 800-53 identifies commonalities and gaps, allowing the organization to reuse applicable work and plan necessary changes. Mappings are a starting point, not proof of equivalence; individual controls still need assessment. (csrc.nist.gov)

Learn more

NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations

CCAK: Certificate of Cloud Auditing Knowledge

AstroTutor

Notes

Readiness

QuestionQ64

Community Discussion