CCAK: Certificate of Cloud Auditing Knowledge

The organization establishes its own policies and expected behavior, so it should define what violates them. External auditors and service providers may assess or support compliance, but they do not own the organization’s internal policies. (csrc.nist.gov)