Certificate of Cloud Auditing Knowledge (CCAK) — Question 257

When an organization adopts a new cloud requirement, which of the following programs should perform testing to ensure the adopted requirements are effective?

Answer options

• A. Compliance
• B. Governance
• C. Internal auditors
• D. External auditors

Correct answer: C

Explanation

The correct answer is C, as internal auditors are responsible for assessing the effectiveness of an organization's processes and controls, including new cloud requirements. Compliance and governance programs focus more on ensuring adherence to regulations and policies rather than direct testing. External auditors typically evaluate the organization's overall financial statements and compliance but do not focus on internal requirement testing.