Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an Information Security Management System based on ISO/IEC 27001?

Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an Information Security Management System based on ISO/IEC 27001?
A . ISO/IEC 27017:2015
B . CSA Cloud Control Matrix (CCM)
C . NIST SP 800-146
D . ISO/IEC 27002

View Answer

Answer: D

Explanation:

Reference: https://cyber.gc.ca/en/guidance/guidance-cloud-security-assessment-and-authorization-itsp50105