ISC2 CCSP Exam - Topic 3 Question 56 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 56
Topic #: 3

[All CCSP Questions]

Which of the following frameworks focuses specifically on design implementation and management?

AISO 31000:2009

BISO 27017

CNIST 800-92

DHIPAA

Show Suggested Answer

Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.

by Gertude at Jul 22, 2022, 06:48 PM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glendora

4 months ago

Wait, HIPAA? I didn't know it had anything to do with design!

upvoted 0 times

...

Tawny

4 months ago

Totally agree, ISO 31000 is the one for design management!

upvoted 0 times

...

Emelda

4 months ago

NIST 800-92? I thought that was for IT security guidelines.

upvoted 0 times

...

Blair

4 months ago

I think ISO 27017 is more focused on cloud security.

upvoted 0 times

...

Malcolm

4 months ago

ISO 31000:2009 is all about risk management.

upvoted 0 times

...

Goldie

5 months ago

I vaguely recall that ISO 27017 is related to cloud security, but I can't remember if it touches on design management.

upvoted 0 times

...

Jonelle

5 months ago

I feel like HIPAA is more about healthcare regulations, so it probably doesn't fit the question about design implementation.

upvoted 0 times

...

Tijuana

5 months ago

I remember studying NIST 800-92, but I thought it was more about security guidelines rather than design management.

upvoted 0 times

...

Ettie

5 months ago

I think ISO 31000:2009 might be the right answer since it deals with risk management, but I'm not entirely sure if it focuses on design implementation specifically.

upvoted 0 times

...

Samira

5 months ago

I'm a bit confused on this one. I know X-rays are a type of radiation, but I'm not sure if they're considered an "Image generation" technique. I'll have to think about this a bit more.

upvoted 0 times

...

Johnathon

5 months ago

This question seems pretty straightforward. I'll read it carefully and think about the key business factors that could impact the scope and type of benchmark.

upvoted 0 times

...

Kattie

5 months ago

Hmm, I'm not sure about this one. The packet capture doesn't seem to show a clear pattern of a TCP flood or DNS flood. I'll need to think this through a bit more carefully.

upvoted 0 times

...