Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CCSP Exam - Topic 3 Question 56 Discussion

Which of the following frameworks focuses specifically on design implementation and management?
A) ISO 31000:2009
B) ISO 27017
C) NIST 800-92
D) HIPAA

ISC2 CCSP Exam - Topic 3 Question 56 Discussion

Actual exam question for ISC2's CCSP exam
Question #: 56
Topic #: 3
[All CCSP Questions]

Which of the following frameworks focuses specifically on design implementation and management?

Show Suggested Answer Hide Answer
Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.


by Gertude at Jul 22, 2022, 06:48 PM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Glendora
8 months ago
Wait, HIPAA? I didn't know it had anything to do with design!
upvoted 0 times
...
Tawny
8 months ago
Totally agree, ISO 31000 is the one for design management!
upvoted 0 times
...
Emelda
9 months ago
NIST 800-92? I thought that was for IT security guidelines.
upvoted 0 times
...
Blair
9 months ago
I think ISO 27017 is more focused on cloud security.
upvoted 0 times
...
Malcolm
9 months ago
ISO 31000:2009 is all about risk management.
upvoted 0 times
...
Goldie
9 months ago
I vaguely recall that ISO 27017 is related to cloud security, but I can't remember if it touches on design management.
upvoted 0 times
...
Jonelle
9 months ago
I feel like HIPAA is more about healthcare regulations, so it probably doesn't fit the question about design implementation.
upvoted 0 times
...
Tijuana
9 months ago
I remember studying NIST 800-92, but I thought it was more about security guidelines rather than design management.
upvoted 0 times
...
Ettie
9 months ago
I think ISO 31000:2009 might be the right answer since it deals with risk management, but I'm not entirely sure if it focuses on design implementation specifically.
upvoted 0 times
...
Samira
9 months ago
I'm a bit confused on this one. I know X-rays are a type of radiation, but I'm not sure if they're considered an "Image generation" technique. I'll have to think about this a bit more.
upvoted 0 times
...
Johnathon
9 months ago
This question seems pretty straightforward. I'll read it carefully and think about the key business factors that could impact the scope and type of benchmark.
upvoted 0 times
...
Kattie
10 months ago
Hmm, I'm not sure about this one. The packet capture doesn't seem to show a clear pattern of a TCP flood or DNS flood. I'll need to think this through a bit more carefully.
upvoted 0 times
...

Save Cancel