CCAK: Certificate of Cloud Auditing Knowledge

By Isaca · Question Mode

QuestionQ63

VerifiedCCM and CAIQ: Goals, Objectives, and Structure

Which of the following allows auditors to conduct gap analyses between what a cloud service provider offers and what the customer requires?

Explanation

A standardized control framework provides common control objectives against which auditors can map customer requirements and assess the provider’s capabilities. This comparison reveals gaps and helps identify where additional controls may be needed. (cloudsecurityalliance.org)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!