Which type of audit report does many cloud providers use to instill confidence in their policies, practices, and procedures to current and potential customers?
SAS70 is already defunct and SOX is not applicable for cloud providers. The question has "instill confidence" doesn't mean the report will shared. SOC1 and SOC2 reports both provide this confidence. SOC2 is the better choice among the two. Not among the choices, I would prefer SOC3 report as "potential" costumers are listed in the question.
It would have to be SAS-70 (now defunct) SOC 1 is financial, SOC 2 would be good but a cloud provide is not going to give that to you. SOX is there to throw you. SAS-70 Type 1 had an auditors report 'Opinion' and a SOC 2 - Type 1 style report. SOC 3 would be best but is not there.
Don't think it can be SAS-70, This report(SOC 1) is the replacement of the Statement on Auditing Standards No. 70(SAS 70). SAS-70 is deprecated. I agree that SOC 2 is usually considered a restricted report but not sure that is important to answering the question.
B correct - SOC 2 is an auditing procedure that ensures your service providers securely manage your data to protect the interests of your organization and the privacy of its clients. For security-conscious businesses, SOC 2 compliance is a minimal requirement when considering a SaaS provider.
Is this correct - I would have thought based on this list SOX is the best answer - can’t think why SAS-70 (replaced by SSAE No 16, which is actually, SOC-1, SOC-2, and SOC-3. SOC-1 is financial and SOC-2 is effectiveness of controls and these are not on offer to potential customers. So that leaves SOX as the potential (best) answer?
Sarbanes-Oxley (SOX); is U.S. law meant to protect investors from fraudulent accounting activities by corporations. SOC-2 is the best option...
upvoted 3 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Kneebee
8 months, 3 weeks agohanyahmed
1 year, 11 months agocertifiedgeek
2 years, 6 months agoVoldamort
2 years, 10 months agoserget12
2 years, 1 month agodeegadaze1
3 years, 8 months agoCISSP_Wannabe
3 years, 8 months agodeegadaze1
3 years, 8 months ago