Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. SOC 2, TYPE 2 In this scenario, the vendor is likely providing you with a SOC 2, Type 2 report. A SOC 2, Type 2 report includes an attestation on the adequacy of the design and operating effectiveness of controls over a period of time. This type of report is specifically focused on the controls relevant to security, availability, processing integrity, confidentiality, and privacy of the system, making it suitable for assessing the control environment of a vendor providing cloud or other IT services.
SOC 2 defines the criteria for managing customer data based on five trust service principles. C,I,A, Service Integrity, and Security SOC 2 is is an auditing procedure that ensures your Service Providers securely manage your data in the interests of the organization and the privacy of its clients. The answer should be SOC2 Type 1 - Describes the Design effectiveness of the Vendor Systems whether the design meets the organizations trust principles. SOC 2 Type 2 - details the Operational Effectiveness of those systems
Yes, Type 1 is Design, Type 2 effectiveness over a Periode of time