Isaca Exam CGEIT Topic 3 Question 69 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 69
Topic #: 3

When selecting a cloud provider, which of the following provides the MOST comprehensive information regarding the current status and effectiveness of the provider's controls?

AGlobally recognized certification

BThird-party audit report

CControl self-assessment (CSA)

DMaturity assessment

Show Suggested Answer

Suggested Answer: B

by Karl at Mar 05, 2024, 03:00 PM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erinn

1 years ago

Yes, that's a good point. It's important for the provider to regularly assess their own controls as well.

upvoted 0 times

...

Charlene

1 years ago

I think a control self-assessment could also provide valuable insights into the provider's controls.

upvoted 0 times

...

Erinn

1 years ago

That's true, but a certification may not always involve a detailed audit like a third-party report.

upvoted 0 times

...

Felicidad

1 years ago

But wouldn't a globally recognized certification also show that the provider meets certain standards?

upvoted 0 times

...

Daryl

1 years ago

I agree with Erinn, a third-party audit report gives an independent verification of the provider's controls.

upvoted 0 times

...

Erinn

1 years ago

I think the most comprehensive information would be provided by a third-party audit report.

upvoted 0 times

...