Certified Cloud Security Professional (CCSP) — Question 375

An audit scope statement defines the limits and outcomes from an audit.
Which of the following would NOT be included as part of an audit scope statement?

Answer options

• A. Reports
• B. Certification
• C. Billing
• D. Exclusions

Correct answer: C

Explanation

The correct answer is C, as billing is not a relevant aspect of the audit scope statement, which focuses on the audit's limits and expected outcomes. Options A, B, and D are all pertinent to defining what the audit will cover and what it aims to achieve.