Organizations maintain mappings between the different control frameworks they adopt to:

Organizations maintain mappings between the different control frameworks they adopt to:
A . help identify controls with common assessment status.
B . avoid duplication of work when assessing compliance,
C . help identify controls with different assessment status.
D . start a compliance assessment using the latest assessment.

View Answer

Answer: B

Explanation:

Organizations maintain mappings between the different control frameworks they adopt to avoid duplication of work when assessing compliance. This is because different control frameworks may have overlapping or equivalent controls that address the same objectives or risks. By mapping these controls, organizations can streamline their compliance assessment process and reduce the cost and effort involved. Mappings also help organizations to identify any gaps or inconsistencies in their control coverage and address them accordingly. This is part of the Cloud Control Matrix (CCM) domain COM-03: Control Frameworks, which states that "The organization should identify and adopt applicable control frameworks, standards, and best practices to support the cloud compliance program."1

Reference: CCAK Study Guide, Chapter 3: Cloud Compliance Program, page 54