CCAK: Certificate of Cloud Auditing Knowledge

By Isaca · Question Mode

QuestionQ87

VerifiedCloud Auditing

An independent contractor is evaluating the security maturity of a Software as a Service (SaaS) company against industry standards. The SaaS company has developed and hosted all its products using cloud services provided by a third-party cloud service provider.

What is the optimal and most efficient mechanism for assessing the controls for which the provider is responsible?

Explanation

Independent audit reports, such as SOC reports, provide evidence about the cloud provider’s controls without requiring a separate direct audit. They offer stronger independent assurance than provider questionnaires. The assessor should check that the report covers the relevant services, controls, and period. (learn.microsoft.com)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!