Domain 5/Objective 5.2 Regulations, Standards, and Frameworks

An organization is involved in handling credit card transactions. Which standard is specifically designed to ensure the security of payment card data?

• GDPR

• ISO 27001

• Cloud Controls Matrix

• PCI DSS

A company is looking to secure its web servers and is seeking guidelines tailored to specific platforms. Which type of secure configuration guide would be most helpful?

• Cloud Controls Matrix

• Vendor-specific guide

• CIS Controls

• ISO 27001/27002

A company is concerned about securing its network infrastructure devices. Which type of guide should the organization refer to for specific recommendations?

• Cloud Controls Matrix

• CIS Controls

• Vendor-specific guide

• SSAE SOC Type I/II

An organization is focused on managing risks across its entire enterprise, considering cybersecurity as an integral part of its strategy. Which framework aligns with this holistic approach?

• CIS Controls

• ISO 27001/27002

• NIST RMF/Cybersecurity Framework

• Cloud Security Alliance

A multinational company is seeking a comprehensive information security management system. Which international standard provides guidelines for this purpose?

• CIS Controls

• ISO 27001/27002

• SSAE SOC Type I/II

• Cloud Security Alliance

A cloud service provider wants to assure its customers about the security controls in place. Which organization's framework would be most relevant for this purpose?

• Cloud Security Alliance

• CIS Controls

• ISO 27001/27002

• NIST RMF/Cybersecurity Framework

An organization is looking to adopt international standards for information security. Which set of standards covers information security, privacy, and risk management?

• CIS Controls

• ISO 27001/27002/27701/31000

• NIST RMF/Cybersecurity Framework

• Cloud Security Alliance

A company wants to establish a robust cybersecurity framework that aligns with industry best practices. Which framework would be most suitable for this purpose?

• CIS Controls

• SSAE SOC Type I/II

• Cloud Controls Matrix

• ISO 27001/27002

An organization is undergoing an audit to demonstrate the effectiveness of its internal controls related to financial reporting. Which type of audit should the organization undergo?

• CIS Controls

• PCI DSS

• SSAE SOC Type I/II

• Cloud Controls Matrix

An organization is preparing to expand its operations to Europe and needs to ensure compliance with data protection regulations. Which regulation is particularly relevant in this context?

• PCI DSS

• ISO 27001

• CIS Controls

• GDPR