CHAPTER 4

Compliance and Audit Management

This chapter covers the following topics from Domain 4 of the CSA Guidance:

•   Impact of the Cloud on Contracts

•   Compliance Scope

•   Compliance Analysis Requirements

•   How the Cloud Changes Audits

•   Right to Audit

•   Audit Scope

•   Auditor Requirements

Trust, but verify.

—Russian proverb

You may recall this quote from President Ronald Reagan (during nuclear disarmament discussions with the Soviet Union), but this Russian proverb is truer today than ever with regard to cloud services. Providers will supply you with all sorts of documentation to build trust in an offering, but how are the security statements within these documents verified to ensure that you remain compliant with regulations ...

Get CCSK Certificate of Cloud Security Knowledge All-in-One Exam Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.