CCSP: Certified Cloud Security Professional

Question

Because cloud providers do not disclose detailed information about their infrastructure and practices to the general public, they often use established audit reports to build public trust, with the auditors’ reputation providing assurance.

Which type of audit report can be used for general-public trust assurance?

Explanation

A SOC 3 report is a general-use report that can be freely distributed to provide public assurance about controls relevant to security, availability, processing integrity, confidentiality, or privacy. SOC 2 reports provide more detailed restricted-use information.

Learn more

SOC 3® - SOC for Service Organizations: Trust Services Criteria for General Use Report

CCSP: Certified Cloud Security Professional

AstroTutor

Notes

Readiness

QuestionQ26

Community Discussion