Certificate of Cloud Auditing Knowledge (CCAK) — Question 42

Which of the following is the MOST important audit scope document when conducting a review of a cloud service provider?

Answer options

• A. Updated audit/work program
• B. Documentation criteria for the audit evidence
• C. Processes and systems to be audited
• D. Testing procedure to be performed

Correct answer: C

Explanation

The correct answer is C, as understanding the specific processes and systems being audited is fundamental to the audit's scope. Options A, B, and D are important but serve as supporting documents rather than defining the primary focus of the audit.