Certificate of Cloud Auditing Knowledge (CCAK) — Question 215

Regarding suppliers of a cloud service provider, it is MOST important for the auditor to be aware that the:

Answer options

• A. client organization has a clear understanding of the provider's suppliers.
• B. client organization does not need to worry about the provider's suppliers, as this is the provider's responsibility.
• C. suppliers are accountable for the provider's service that they are providing.
• D. client organization and provider are both responsible for the provider's suppliers.

Correct answer: A

Explanation

The correct answer is A because it emphasizes the importance of the client organization's awareness of the provider's suppliers, which is crucial for effective risk management. Option B is incorrect as it downplays the client's responsibility in understanding supplier relationships. Option C is misleading since while suppliers are involved, the accountability ultimately lies with the provider. Option D suggests shared responsibility, which is not as critical as the client's clear understanding.