Certified Cloud Security Professional – CCSP – Question099

What expectation of data custodians is made much more challenging by a cloud implementation, especially with PaaS or SaaS?

A.
Data classification
B. Knowledge of systems
C. Access to data
D. Encryption requirements

Correct Answer: B

Explanation:

Explanation: Under the Federal Rules of Civil Procedure, data custodians are assumed and expected to have full and comprehensive knowledge of the internal design and architecture of their systems. In a cloud environment, especially with PaaS and SaaS, it is impossible for the data custodian to have this knowledge because those systems are controlled by the cloud provider and protected as proprietary knowledge.