Which of the following are attributes of cloud computing?

Which of the following is NOT a focus or consideration of an internal audit?

An audit scope statement defines the limits and outcomes from an audit.
Which of the following would NOT be included as part of an audit scope statement?

Which of the following is a risk in the cloud environment that is not existing or is as prevalent in the legacy environment?

You are the security subject matter expert (SME) for an organization considering a transition from the legacy environment into a hosted cloud provider's data center.
One of the challenges you're facing is whether the provider will have undue control over your data once it is within the provider's data center; will the provider be able to hold your organization hostage because they have your data?
This is a(n) _________ issue.
Response: