Certificate of Cloud Auditing Knowledge (CCAK) — Question 52

Which of the following is the MOST feasible way to validate the performance of CSPs for the delivery of technology resources?

Answer options

• A. Cloud compliance program
• B. Legacy IT compliance program
• C. Internal audit program
• D. Service organization controls report

Correct answer: A

Explanation

The Cloud compliance program is specifically designed to evaluate the performance and compliance of Cloud Service Providers, making it the most suitable choice. The legacy IT compliance program may not address cloud-specific issues, while an internal audit may lack the specialized focus on cloud services. The service organization controls report, while informative, may not provide the comprehensive validation needed for performance assessment.