Which table stores the links from Policy to Control Objective in a RAM context?

Which table stores the links from Policy to Control Objective in a RAM context?

• A. [sn_compliance_m2m_policy_profile_type]
• B. [sn_compliance_m2m_policy_profile]
• C. [sn_compliance_m2m_policy_statement]
• D. [sn_compliance_m2m_statement_profile_type]

Answer: (C)

In RAM, a Control Objective is represented as a Statement, and the link between a Policy and those objectives is stored in a many-to-many table designed to connect policies with statements. The table sn_compliance_m2m_policy_statement is exactly that: it maps policy records to statement (control objective) records, enabling a policy to be associated with multiple control objectives and vice versa. The other tables are used for different relationships (policy to profile type, policy to profile, or statement to profile type) and do not capture the policy-to-control-objective linkage. So, the policy-to-control-objective connections are stored in the policy_statement M2M table.

In RAM, a Control Objective is represented as a Statement, and the link between a Policy and those objectives is stored in a many-to-many table designed to connect policies with statements. The table sn_compliance_m2m_policy_statement is exactly that: it maps policy records to statement (control objective) records, enabling a policy to be associated with multiple control objectives and vice versa. The other tables are used for different relationships (policy to profile type, policy to profile, or statement to profile type) and do not capture the policy-to-control-objective linkage. So, the policy-to-control-objective connections are stored in the policy_statement M2M table.