Certificate of Cloud Auditing Knowledge (CCAK) — Question 168

An auditor identifies that a cloud service provider received multiple customer inquiries and requests for proposal (RFPs) during the last month. Which of the following should be the BEST recommendation to reduce the provider’s burden?

Answer options

• A. The provider can answer each customer individually.
• B. The provider can schedule a call with each customer.
• C. The provider can share all security reports with customers to streamline the process.
• D. The provider can direct all customer inquiries to the information in the CSA STAR registry.

Correct answer: D

Explanation

The correct answer is D because directing customers to the CSA STAR registry provides centralized information that can answer multiple inquiries efficiently. Options A and B would increase the provider's workload by requiring individual responses, while option C, although helpful, does not address the overarching issue of reducing the burden from multiple inquiries.