Certificate of Cloud Auditing Knowledge (CCAK) — Question 186
Which of the following attestation allows for immediate adoption of the Cloud Control Matrix (CCM) as additional criteria to AICPA Trust Service Criteria and provides the flexibility to update the criteria as technology and market requirements change?
Answer options
- A. PC-IDSS
- B. CSA STAR Attestation
- C. MTCS
- D. BSI Criteria Catalogue C5
Correct answer: B
Explanation
The CSA STAR Attestation is specifically designed to allow for the swift implementation of the Cloud Control Matrix (CCM) as a supplement to AICPA Trust Service Criteria, while also providing the ability to revise criteria as technology and market demands evolve. The other options, such as PC-IDSS, MTCS, and BSI Criteria Catalogue C5, do not offer the same level of flexibility or focus on the CCM in conjunction with AICPA criteria.