Exam CCAK topic 1 question 172 discussion

The most feasible way to validate the performance of cloud service providers for the delivery of technology resources is: **D. Service organization controls report** Service Organization Controls (SOC) reports, such as SOC 1, SOC 2, and SOC 3, are third-party audit reports that provide information about the controls in place at a service organization. These reports offer assurance regarding the effectiveness and reliability of the service provider's controls related to security, availability, processing integrity, confidentiality, and privacy. SOC reports are widely recognized and provide an independent assessment of a service provider's performance, making them a valuable tool for organizations to validate the capabilities and reliability of their cloud service providers.

C. Page 115 of the CCAK Study Guide The concept of the cloud compliance program becomes the only vehicle available to validate the performance of the many cloud providers that may be fulfilling the compliance and business needs of the organization.