In a community cloud, which security control is often the most challenging to manage across organizations?

• A. Access Control for Users
• B. Data Encryption
• C. Incident Response
• D. Identity Federation

Answer: (A)

Access control for users is the most challenging in a community cloud because it sits at the intersection of identities, permissions, and policy across multiple organizations. When resources are shared among tenants, you must harmonize different IAM systems, ownership boundaries, and regulatory requirements, while still provisioning and deprovisioning access as people join, move within, or leave organizations. Handling guest and contractor access, enforcing least privilege, and maintaining consistent role definitions across diverse environments introduces ongoing coordination and risk of misconfigurations. While federation helps by linking identities, it also creates trust relationships that must be carefully managed to prevent gaps in access or overly broad permissions, especially as roles and temporary access windows change. Auditing and compliance become more complex because access events span multiple administrative domains. Data encryption and incident response can be standardized and centralized to a greater extent, but the day-to-day enforcement of who can access what across organizations remains the most persistent challenge.