CCAK: Certificate of Cloud Auditing Knowledge

Cloud customers may lack direct control over or visibility into provider-managed security controls. Independent audits and certifications provide evidence for assessing those controls and the risks associated with that limited control. Their scope and findings must still be evaluated, and customers remain responsible for their own controls. (cyber.gc.ca)