Certificate of Cloud Auditing Knowledge (CCAK) — Question 79

An organization that is utilizing a community cloud is contracting an auditor to conduct a review on behalf of the group of organizations within the cloud community. From the following, to whom should the auditor report the findings?

Answer options

• A. Public
• B. Management of organization being audited
• C. Shareholders/interested parties
• D. Cloud service provider

Correct answer: C

Explanation

The auditor should report findings to the shareholders and interested parties since they have a vested interest in the results of the audit. Reporting to the management of the audited organization or the cloud service provider does not fulfill the requirement of serving the broader community's interests, while the public does not typically require direct audit findings.