Certificate of Cloud Auditing Knowledge (CCAK) — Question 89

In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

Answer options

• A. Service Provider control
• B. Impact and Risk control
• C. Data Inventory control
• D. Compliance control

Correct answer: D

Explanation

The correct answer is D, Compliance control, as it specifically addresses the need for service providers to inform customers about compliance issues related to their data. The other options do not directly relate to the obligation of the provider to communicate compliance impacts and risks to customers.