QuestionQ36Verified/Cloud AuditingCopy linkReport a problemAsk AstroTutorSave questionWhich legal documents should be provided to auditors in connection with risk management?AEnterprise cloud strategy and policyBContracts and service level agreements (SLAs) of cloud service providersCPolicies and procedures established around third-party risk assessmentsDInventory of third-party attestation reportsShow AnswerAnswerExplanationCloud provider contracts and service level agreements document the provider’s obligations and service commitments. Auditors can review them to assess whether risk-related requirements, such as security responsibilities, service levels, and audit rights, are addressed. (csrc.nist.gov)Learn moreNIST: Audit (supplier process)NIST: Service Level AgreementShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion