CCSP: Certified Cloud Security Professional

Question

Your newly appointed CISO is putting greater emphasis and attention on regulatory compliance as your applications and systems move to cloud environments.

Which of the following would NOT be a major focus as you create a project plan centered on regulatory compliance?

Explanation

Compliance-focused data-protection controls address information in all three operational states: stored data (at rest), actively processed data (in use), and transmitted data (in transit). A data custodian is an organizational role, not a data state requiring equivalent protection planning. NIST guidance identifies protecting data at rest, in transit, and in use as enterprise data-protection objectives.

Learn more

CCSP: Certified Cloud Security Professional

AstroTutor

Notes

Readiness

QuestionQ5

Community Discussion