❓ Week 2 Knowledge Check – Frameworks & Risk-Based Compliance

What federal law mandates agencies to protect federal information

GDPR

PCI-DSS

FISMA

SOC 2

Which compliance framework is focused on cloud security for federal use?

ISO 27001

FedRAMP

HIPAA

NIST SP 800-171

SOC 2 is primarily used in the healthcare sector.

True

False

ISO 27001 provides a certifiable framework for managing information security.

True

False

Name one common element between NIST SP 800-53 and ISO 27001.

This response will be reviewed and graded after submission.

Why is risk assessment considered foundational to compliance?

This response will be reviewed and graded after submission.

Question 7

Sort elements

Cloud security authorization
Trust Service Criteria
Information Security Management
Protecting CUI in non-federal systems

FedRAMP

SOC 2

ISO 27001

NIST SP 800-171

Which of the following is NOT typically part of a risk assessment process?

Risk Identification

Risk Evaluation

Risk Fabrication

Risk Mitigation

You are advising a cloud service provider on achieving FedRAMP Moderate. What are two compliance strategies they must implement?

This response will be reviewed and graded after submission.

Which framework provides a standardized set of privacy regulations across the EU?

ISO 27001

GDPR

HIPAA

SOC 2