Security and Risk Management
Question #82
A financial services company needs to create a report for regulators to demonstrate the security posture of its cloud-based infrastructure. Which element is most crucial?
A. An in-depth analysis comparing cloud security policies to industry benchmarks and best practices.
B. Detailed documentation and evidence of consistent security assessments, including regular compliance audits and vulnerability tests.
C. A summary of the security certifications upheld by the cloud service provider and its vendors.
D. The results of a previous Risk Assessment based on the NIST RMF.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.