ISC CCSP Practice Test - Questions Answers, Page 50

A data custodian is responsible for the safe custody, transport, and storage of data, and the implementation of business roles.

Forensic analysis is the least challenging of the answers provided as it refers to the analysis of data once it is obtained. The challenges revolve around obtaining the data for analysis due to the complexities of international law, the decentralization of data storage or difficulty knowing where to look, and identifying the data owner, controller, and processor.

The CSA CCM is an inventory of cloud service security controls that are arranged into separate security domains, not a hierarchy.

KRI stands for key risk indicator. KRIs are the red flags if you will in the world of risk management. When these change, they indicate something is amiss and should be looked at quickly to determine if the change is minor or indicative of something important.

Mandatory breach reporting is the best example of regulated PII components. The rest are generally considered components of contractual PII.

The use of subcontractors can add risk to the supply chain and should be considered; trusting the provider's management of their vendors and suppliers (including subcontractors) is important to trusting the provider. Conversely, the customer is not likely to be allowed to review the physical design of the datacenter (or, indeed, even know the exact location of the datacenter) or the personnel security specifics for the provider's staff. "Redundant uplink grafts" is a nonsense term used as a distractor.

Enveloping is a nonsense term, unrelated to risk management. The rest are not.

Plausibility, here, is a distractor and not specifically relevant to cloud forensics.

The lowest level is Level 1, which is self-assessment, Level 2 is an external third-party attestation, and Level 3 is a continuous-monitoring program. Hybridization does not exist as part of the CSA STAR program.