CCAK Question 23

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  To qualify for CSA STAR attestation, a cloud provider's SOC 2 report must cover specific criteria that align with the CSA's requirements. The correct answer is: C. all Cloud Control Matrix (CCM) controls and TSPC security principles. The CSA Security, Trust & Assurance Registry (STAR) attestation involves assessing a cloud service provider's security controls against the Cloud Control Matrix (CCM) and the Trust Services Criteria (TSC), formerly known as Trust Service Principles and Criteria (TSPC). This provides a comprehensive evaluation of the provider’s security posture and practices.

• 2

  CCAK -, correct ans is C

• Chose C2

  CSA STAR Attestation—CSA STAR Attestation is an auditing procedure to report on the examination of the implementation of trust service principles (TSP) and cloud-specific control objectives (CCM). CSA STAR Attestation can be considered as a SOC 2 Type 2 attestation augmented by CCM requirements. It was created thanks to a collaboration between CSA and the American Institute of CPAs (AICPA) to provide guidelines for CPAs to conduct SOC 2 engagements using criteria from the AICPA (Trust Service Principles, AT 101) and the CSA Cloud Controls Matrix. CCAK Guide - Page: 372