From the course: ISC2 Certified Cloud Security Professional (CCSP) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Cloud auditing

Cloud auditing

From the course: ISC2 Certified Cloud Security Professional (CCSP) Cert Prep

Start my 1-month free trial Buy for my team

Cloud auditing

“

- [Instructor] Welcome to this lesson on cloud auditing. There's three learning objectives in this lesson. The first is audit requirements and controls, we'll then go over some assurance challenges, and, finally, audit reports and scope. Starting with audit requirements and controls, much like other processes, auditing within a cloud environment presents a different kind of challenge to completing an audit in an on-prem environment. Some of the strategies that organizations can use here to ensure that they are auditing effectively are using standard frameworks in the industry, such as the Cloud Security Alliance's Cloud Controls Matrix and other secure control frameworks, which can aid in mapping internal controls to compliance obligations, which overall just simplifies the audit process. Organizations should also conduct both internal and external audits, and both of these play an important role in point in time and continuous monitoring and it allows organizations to identify and…

Contents