QuestionQ49

VerifiedSTAR Program

Which of the following methods can a cloud service provider use with a cloud customer that does not want to share security and control information?

Explanation

An independent auditor can assess the relevant controls and provide a report or appropriately scoped summary as third-party assurance, reducing the need for direct access to sensitive evidence. The report's contents and distribution must still be managed: detailed reports can themselves disclose control information. (dropbox.com)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!