Chapter 1
Security Architecture
Course: Comptia Securityx Cas 005
Subject: Comptia Securityx Cas 005 Practice Exam
Chapter: Governance Risk And Compliance
Managing and mitigating vendor risk is critical for maintaining the security, compliance, and operational integrity of an organization. Vendor risks can arise from shared responsibilities, dependencies, geographic considerations, and technical vulnerabilities.
1. Shared Responsibility Model
a) Cloud Service Provider (CSP) Responsibilities
Cloud service providers manage certain layers of the infrastructure, while the client retains control over others, depending on the service model (IaaS, PaaS, SaaS).
- Geographic Location:
The CSP determines the location of data centers, which can impact data residency, compliance, and latency. Example: A CSP with data centers in Europe must comply with GDPR regulations.
- The CSP determines the location of data centers, which can impact data residency, compliance, and latency.
- Example: A CSP with data centers in Europe must comply with GDPR regulations.
- Infrastructure: