Podcast
Questions and Answers
What is the name of the auditing standard that focuses on reports related to trust services criteria or security controls?
What is the name of the auditing standard that focuses on reports related to trust services criteria or security controls?
- Type I Audit
- SSAE 18 (correct)
- SOC 2
- Cloud Controls Matrix
What is the name of the report suite that focuses on security controls and trust services criteria?
What is the name of the report suite that focuses on security controls and trust services criteria?
- SOC 1
- SOC 2 (correct)
- SOC 4
- SOC 3
What type of audit examines the controls in place at a particular date and time?
What type of audit examines the controls in place at a particular date and time?
- Cloud Controls Matrix Audit
- SOC 2 Audit
- Type II Audit
- Type I Audit (correct)
What is the minimum period required for a type II audit?
What is the minimum period required for a type II audit?
What is the name of the not-for-profit organization that focuses on security in the cloud?
What is the name of the not-for-profit organization that focuses on security in the cloud?
What is the name of the framework created by the Cloud Security Alliance?
What is the name of the framework created by the Cloud Security Alliance?
What is one major challenge when trying to secure an organization's data?
What is one major challenge when trying to secure an organization's data?
What can security frameworks help you with?
What can security frameworks help you with?
Why might you need to refer to security frameworks?
Why might you need to refer to security frameworks?
What is one benefit of using security frameworks?
What is one benefit of using security frameworks?
What is unique about each organization's security needs?
What is unique about each organization's security needs?
What can security frameworks help you understand?
What can security frameworks help you understand?
What is the main focus of the CIS Critical Security Controls (CSC)?
What is the main focus of the CIS Critical Security Controls (CSC)?
Which framework is required for United States Federal Government Agencies?
Which framework is required for United States Federal Government Agencies?
What is the main difference between the NIST RMF and NIST CSF?
What is the main difference between the NIST RMF and NIST CSF?
What are the three major areas of the NIST Cybersecurity Framework (CSF)?
What are the three major areas of the NIST Cybersecurity Framework (CSF)?
What is the purpose of the ISO/IEC 27001 standard?
What is the purpose of the ISO/IEC 27001 standard?
What is the focus of the ISO/IEC 27701 standard?
What is the focus of the ISO/IEC 27701 standard?
What is the main purpose of the CIS Critical Security Controls (CSC)?
What is the main purpose of the CIS Critical Security Controls (CSC)?
What is unique about the CIS Critical Security Controls (CSC)?
What is unique about the CIS Critical Security Controls (CSC)?
What is the SSAE SOC 2 typically associated with?
What is the SSAE SOC 2 typically associated with?
How many steps are in the NIST Risk Management Framework (RMF)?
How many steps are in the NIST Risk Management Framework (RMF)?
Flashcards are hidden until you start studying
