During an audit it was identified that a critical application hosted in an off-premises cloud is not part of the organization's DRP (Disaster Recovery Plan). Management stated that it is responsible for ensuring that the cloud service provider (CSP) has a plan that is tested annually. What should be the auditor's NEXT course of action?

Which of thefollowing items is NOT an example of Security as a Service (SecaaS)?

To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

The MAIN difference between Cloud Control Matrix (CCM) and Consensus Assessment Initiative Questionnaire (CAIQ) is that:

Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?