CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ60

VerifiedLegal, Risk and Compliance

In addition to general data-privacy and protection regulations, some categories of data are subject to stricter regulation and oversight.

Which of the following is not a regulatory framework for more sensitive or specialized data?

Explanation

FIPS 140-2 specifies security requirements for cryptographic modules and their validation, rather than regulating a particular sensitive-data category. HIPAA governs protected health information, PCI DSS establishes requirements for payment account data, and FedRAMP provides a standardized federal security assessment and authorization process for cloud services.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!