An organization that is utilizing a community cloud is contracting an auditor to conduct a review on behalf of the group of organizations within the cloud community. From the following, to whom…

The correct answer is D. Cloud service provider. In a community cloud, a shared infrastructure is operated - often by or through a cloud service provider - for a defined group of organizations with common interests (e.g., regulatory requirements, shared mission). When an auditor conducts a review of the community cloud on…

Cloud Audit Reporting and Assurance

Question

An organization that is utilizing a community cloud is contracting an auditor to conduct a review on behalf of the group of organizations within the cloud community. From the following, to whom should the auditor report the findings?

Options

APublic
BManagement of organization being audited
CShareholders/interested parties
DCloud service provider

How the community answered

(31 responses)

A
10% (3)
B
16% (5)
C
3% (1)
D
71% (22)

Explanation

In a community cloud, a shared infrastructure is operated - often by or through a cloud service provider - for a defined group of organizations with common interests (e.g., regulatory requirements, shared mission). When an auditor conducts a review of the community cloud on behalf of the entire group, the findings related to the cloud infrastructure and shared operations should be reported to the cloud service provider, as they are accountable for managing and remediating issues with the shared platform. The CSP is the party responsible for the community cloud's operations and must act on audit findings affecting the shared environment.

Topics

#Community Cloud#Audit Reporting#Cloud Service Provider#Audit Stakeholders

Community Discussion

No community discussion yet for this question.

Full CCAK Practice