Which of the following enables auditors to conduct gap analyses of what a cloud service provider offers versus what the customer requires?

A. The as-is and to-be enterprise architecture (EA)

B. Using a standardized control framework

C. The experience gained over the years

D. Understanding the customer risk profile








 

Suggested Answer: B

Community Answer: B



This question is in CCAK Certificate of Cloud Auditing Knowledge Exam
For getting Certificate of Cloud Auditing Knowledge (CCAK)










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.