Certificate of Cloud Auditing Knowledge (CCAK) — Question 169

Which of the following is the MOST feasible way to validate the performance of cloud service providers for the delivery of technology resources?

Answer options

• A. Legacy IT compliance program
• B. Internal audit program
• C. Cloud compliance program
• D. Service organization controls report

Correct answer: D

Explanation

The Service organization controls report is specifically designed to evaluate the controls at a service organization, making it the most effective way to validate cloud service providers' performance. In contrast, a legacy IT compliance program, internal audit program, and cloud compliance program may not provide the same level of insight into the specific controls and performance metrics relevant to cloud services.