From the course: CISSP Cert Prep (2021): 1 Security and Risk Management
Join today to access over 22,500 courses taught by industry experts or purchase this course individually.
Cloud audits
From the course: CISSP Cert Prep (2021): 1 Security and Risk Management
Cloud audits
- [Instructor] When conducting audits or assessments of organizations who leverage the cloud, audit professionals run into some unique challenges. The use of virtualization and cloud computing raise unique assurance issues. The very fact that an organization is using service providers for the storage, processing, and transmission of some of their data, expands the scope of the audit. If the organization is depending upon the security controls of their provider in some way, which is always the case in cloud computing, then that provider's controls are within the scope of the audit. Now, this might lead you to think that auditors would then need to travel to the cloud provider site and verify the controls there, just as they would at the organization's own data centers. After all, they do need some assurance that the controls are functioning properly. But just imagine what that would mean. How would you visit the data…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.