An auditor is performing an audit on behalf of a cloud customer.

An auditor is performing an audit on behalf of a cloud customer.

For assessing security awareness, the auditor should:
A . assess the existence and adequacy of a security awareness training program at the cloud service provider’s organization as the cloud customer hired the auditor to review and cloud service.
B . assess the existence and adequacy of a security awareness training program at both the cloud customer’s organization and the cloud service provider’s organization.
C . assess the existence and adequacy of a security awareness training program at the cloud customer’s organization as they hired the auditor.
D . not assess the security awareness training program as it is each organization’s responsibility

View Answer

Answer: D