ISC2 Exam CCSP Topic 7 Question 97 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 97
Topic #: 7

[All CCSP Questions]

Which of the following frameworks focuses specifically on design implementation and management?

AISO 31000:2009

BISO 27017

CNIST 800-92

DHIPAA

Show Suggested Answer

Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.

by Jenifer at Jan 27, 2025, 05:53 PM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alease

12 days ago

That's a good point, but I still think B) ISO 27017 is more about design implementation.

upvoted 0 times

...

Rebbeca

13 days ago

I'm leaning towards D) HIPAA because it focuses on healthcare data.

upvoted 0 times

...

Lavina

24 days ago

ISO 27017 looks like it's about cloud security, which is pretty relevant these days. But I think NIST 800-92 is the best fit for this question.

upvoted 0 times

Nguyet

13 days ago

Yeah, ISO 27017 is more about cloud security, but NIST 800-92 is the best fit for this question.

upvoted 0 times

...

Martina

14 days ago

I agree, NIST 800-92 is definitely the one that focuses on design implementation and management.

upvoted 0 times

...

Ahmed

27 days ago

I disagree, I believe it's C) NIST 800-92.

upvoted 0 times

...

Trina

1 months ago

Hey, I heard NIST 800-92 is where they keep all the secret government spy equipment. Better not choose that one unless you want the Men in Black knocking on your door!

upvoted 0 times

...

Alease

1 months ago

I think the answer is B) ISO 27017.

upvoted 0 times

...

Stephanie

1 months ago

I'm not too familiar with these frameworks, but HIPAA sounds like it's more focused on healthcare regulations, so I don't think that's the right answer.

upvoted 0 times

...