Gibson, a security analyst at MiaTech Solutions, is performing cloud penetration testing. As part of this process, he needs to check for any governance and compliance issues in the cloud services…

Gibson, a security analyst at MiaTech Solutions, is performing cloud penetration testing. As part of this process, he needs to check for any governance and compliance issues in the cloud services. Which of the following documents helps Gibson in checking whether the CSP is regularly audited and certified for compliance issues?