Exam CCAK topic 1 question 249 discussion

C. Cloud security alliance (CSA) enterprise architecture (EA) Cloud Security Alliance Enterprise Architecture color-coded progress indicators identify gaps within the four domains (BOSS, ITOS, TECHNOLOGY, SRM). As a presentation medium, this represents to the security professional that several deficiencies exist. It visualize where policies, controls, capabilities are lacking across architectural domain: full/ partial/ no coverage -- study guide page 148

D. Colored impact and likelihood risk matrix A colored impact and likelihood risk matrix is a tool used to visually represent and assess risks based on their impact and likelihood. It helps organizations identify and prioritize gaps in their security capabilities by providing a clear visual depiction of where potential risks lie. This matrix can be used to analyze the effectiveness of current security controls and highlight areas needing improvement, enabling organizations to focus their resources on addressing the most critical vulnerabilities.