QuestionQ21

VerifiedEvaluating a Cloud Compliance Program

The MAIN limitation of relying on traditional cloud compliance assurance methods, such as SOC2 attestations, is that:

Explanation

Traditional attestations provide assurance for a defined date or examination period, so they may not reflect subsequent changes to controls or the environment. A SOC 2 Type 2 report assesses control effectiveness over a specified period, rather than just one point in time, but it still does not provide continuous assurance of the current state. (learn.microsoft.com)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!