Which of the following controls framework should the cloud customer use to assess the overall security risk of a cloud provider?

Which of the following controls framework should the cloud customer use to assess the overall security risk of a cloud provider?
A . SOC3 – Type2
B . Cloud Control Matrix (CCM)
C . SOC2 – Type1
D . SOC1 – Type1

View Answer

Answer: C

Explanation:

Reference: https://www.isaca.org/resources/news-and-trends/newsletters/atisaca/2021/volume-22/preventing-the-next-cybersecurity-attack-with-effective-cloud-security-audits