For third-party audits or attestations, what is critical for providers to publish and customers to evaluate?

The correct answer is A. Scope of the assessment and the exact included features and services for the assessment. It is critical for a provider to publish, and a customer to evaluate, the scope of the assessment, and which features and services are included in the assessment.

Auditing

Question

Options

AScope of the assessment and the exact included features and services for the assessment
BProvider infrastructure information including maintenance windows and contracts
CNetwork or architecture diagrams including all end point security devices in use
DService-level agreements between all parties
EFull API access to all required services

How the community answered

(17 responses)

A
82% (14)
C
6% (1)
E
12% (2)

Explanation

It is critical for a provider to publish, and a customer to evaluate, the scope of the assessment, and which features and services are included in the assessment.

Topics

#third-party audit#attestation scope#provider transparency#assessment criteria

Community Discussion

No community discussion yet for this question.

Full CCSK Practice