Certified Information Systems Auditor (CISA) — Question 108

Which of the following would be MOST useful to an organization planning to adopt a public cloud computing model?

Answer options

• A. Service level agreement (SLA) performance metrics
• B. Management attestation report
• C. Independent control assessment
• D. Audit report prepared by the service provider

Correct answer: C

Explanation

The correct answer, C, is crucial because an Independent control assessment provides an objective evaluation of the cloud provider's controls and security measures. While the other options may offer useful information, they do not provide the same level of independent verification necessary for making informed decisions about adopting a public cloud model.