Which of the following BEST enables an organization to evaluate the security posture of a cloud service?

The correct answer is C. Third-party audit reports. Third-party audit reports provide independent, objective assessments of a cloud service provider's security controls, offering the most reliable basis for evaluating its security posture.

Submitted by haruto_sh· Apr 18, 2026Information Security Risk Management

Question

Options

APenetration testing reports
BIndustry peer reviews
CThird-party audit reports
DService provider attestations

How the community answered

(38 responses)

A
3% (1)
B
8% (3)
C
74% (28)
D
16% (6)

Explanation

Third-party audit reports provide independent, objective assessments of a cloud service provider's security controls, offering the most reliable basis for evaluating its security posture.

Topics

#Cloud Security#Third-Party Risk Management#Vendor Assessment#Security Audits

Community Discussion

No community discussion yet for this question.

Full CISM Practice