Which publication addresses security and privacy in Public Cloud Computing?

• A. SP 800-144
• B. SP 800-53
• C. SP 800-30
• D. SP 800-61

Answer: (A)

Security and privacy in public cloud computing is addressed by NIST SP 800-144, Guidelines on Security and Privacy in Public Cloud Computing. This publication is specifically focused on cloud environments and covers how to manage risk, protect data, and address privacy concerns when using public cloud services. It discusses the responsibilities of both cloud customers and providers, considerations for data location and multi-tenant environments, and practical controls around identity, access management, encryption, and auditing in a cloud context.

The other publications serve broader or different purposes. SP 800-53 provides a broad catalog of security and privacy controls for federal information systems and organizations, not cloud-specific guidance. SP 800-30 offers a general risk assessment methodology applicable across systems. SP 800-61 focuses on incident handling and response. Since the question is about security and privacy in public cloud computing specifically, the cloud-focused guidance in SP 800-144 is the best match.