Câu 39: 312-40V2: Certified Cloud Security Engineer (CCSE) v2

The organization TechWorld Ltd. used cloud for its business. It operates from an EU country (Poland and Greece). Currently, the organization gathers and processes the data of only EU users. Once, the organization experienced a severe security breach, resulting in loss of critical user data. In such a case, along with its cloud service provider, the organization should be held responsible for non-compliance or breaches. Under which cloud compliance framework will the company and cloud provider be penalized?

1. A. NIST
2. B. ITAR
3. C. GDPR — đáp án hiện tại
4. D. HIPAA