To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

• A.Cloud Control Matrix (CCM) and ISO/IEC 27001:2013 controls.
• B.maturity model criteria.
• C.ISO/IEC 27001: 2013 controls.
• D.all Cloud Control Matrix (CCM) controls and TSPC security principles.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

• A.The violation is agreed upon and documented.
• B.The violation is agreed to verbally by the CSP.
• C.Nothing can be done to enforce violations as this is a cloud service.
• D.Violations will be automatically enforced so no action is needed.

Comment: *

Name: *

Email: *

Verification: *

What type of termination occurs at the initiative of one party, and without the fault of the other party?

• A.Termination for convenience
• B.Termination without the fault
• C.Termination for cause
• D.Termination at the end of the term

Comment: *

Name: *

Email: *

Verification: *

How should controls be designed by an organization?

• A.Using the ISO27001 framework
• B.Using the organization's risk management framework
• C.By the cloud provider
• D.By the internal audit team

Comment: *

Name: *

Email: *

Verification: *

ENISA: A reason for risk concerns of a cloud provider being acquired is:

• A.Resource isolation may fail
• B.Provider may change physical location
• C.Arbitrary contract termination by acquiring company
• D.Non-binding agreements put at risk
• E.Mass layoffs may occur

Comment: *

Name: *

Email: *

Verification: *