What should be the auditor's PRIMARY objective while examining a cloud service provider's (CSP's) SLA?

The correct answer is C. Verifying whether the SLA caters to the availability requirements of the cloud service customer. From an audit perspective, the most critical purpose of reviewing a CSP's SLA is to confirm that the availability commitments align with the cloud customer's actual operational requirements. If the SLA does not meet the customer's availability needs, all other aspects…

Cloud Auditing Basics and Tools

Question

Options

AVerifying whether commensurate compensation in the form of service credits is factored in if the
BVerifying whether the SLA includes all the operational matters which are material to the operation
CVerifying whether the SLA caters to the availability requirements of the cloud service customer
DVerifying whether the SLAs are well-defined and measurable

How the community answered

(37 responses)

A
5% (2)
B
14% (5)
C
73% (27)
D
8% (3)

Explanation

From an audit perspective, the most critical purpose of reviewing a CSP's SLA is to confirm that the availability commitments align with the cloud customer's actual operational requirements. If the SLA does not meet the customer's availability needs, all other aspects (measurability, completeness, or compensation clauses) are secondary. Options B and D address important qualities of an SLA but are means to the end - ensuring the SLA is fit for purpose from the customer's standpoint. Option A (service credits) addresses financial remediation, not operational assurance.

Topics

#SLA Auditing#Cloud Service Agreements#Availability Requirements#Auditor Objectives

Community Discussion

No community discussion yet for this question.

Full CCAK Practice