QuestionQ83Verified/Cloud AuditingCopy linkReport a problemAsk AstroTutorSave questionRegarding a cloud service provider’s suppliers, it is MOST important for the auditor to be aware that the:Aclient organization does not need to worry about the provider's suppliers, as this is the provider's responsibility.Bsuppliers are accountable for the provider's service that they are providing.Cclient organization and provider are both responsible for the provider's suppliers.Dclient organization has a clear understanding of the provider's suppliers.Show AnswerAnswerExplanationA client organization needs a clear understanding of the cloud provider’s suppliers and their roles to assess security, availability, compliance, and contractual risks. Outsourcing services does not eliminate the client’s need for due diligence; responsibilities and remedies should be established in the relevant agreements. (govinfo.gov)Learn moreNIST: Guidelines on Security and Privacy in Public Cloud ComputingShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion