Certificate of Cloud Security Knowledge (CCSK) — Question 83

Audits should be robustly designed to reflect best practice, appropriate resources, and tested protocols and standards. They should also use what type of auditors?

Answer options

• A. Auditors working in the interest of the cloud customer
• B. Independent auditors
• C. Certified by CSA
• D. Auditors working in the interest of the cloud provider
• E. None of the above

Correct answer: B

Explanation

Independent auditors are crucial because they provide an unbiased assessment of the audit process, ensuring objectivity and reliability. In contrast, auditors aligned with either the cloud customer or provider could have conflicts of interest that compromise the integrity of the audit. Options C and E do not specifically address the need for independence, making B the best choice.