Cybersecurity Auditing

Chapter 9Cloud and SaaS Security

Modern cloud ecosystems have reshaped how organizations think about control, accountability, and assurance. As enterprises shift workloads to Infrastructure, Platform, and Software as a Service environments, traditional audit boundaries dissolve into shared responsibility models that demand precision and technical fluency. Understanding where provider obligations end and tenant accountability begins is essential to establishing credible audit scope and defensible evidence chains. The complexity of distributed identity systems, ephemeral infrastructure, and automated orchestration means that assurance now depends less on physical controls and more on verifiable configuration states, governance policies, and telemetry coverage.

Effective cybersecurity auditing in the cloud requires the ability to evaluate not just policy, but posture. This chapter examines how identity boundaries, baseline configurations, and logging coverage converge to define what can be tested and trusted. It explores how keys and secrets are governed at the data plane, how segmentation prevents lateral movement, and how evidence is gathered across multi-tenant architectures. By emphasizing exportable, machine-verifiable states rather than screenshots or manual attestations, this chapter reinforces the principle that cloud assurance must be repeatable, transparent, and data-driven. ...