Certified Cloud Security Professional – CCSP – Question241

Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery.
Which of the following are the three components that comprise required disclosure?

A.
Possession, ownership, control
B. Ownership, use, creation
C. Control, custody, use
D. Possession, custody, control

Correct Answer: D

Explanation:

Explanation: Data that falls under the purview of an eDiscovery request is that which is in the possession, custody, or control of the organization. Although this is an easy concept in a traditional data center, it can be difficult to distinguish who actually possesses and controls the data in a cloud environment due to multitenancy and resource pooling. Although these options provide similar-sounding terms, they are ultimately incorrect.