Câu 483: CISA: Certified Information Systems Auditor

Which of the following BEST enables an IS auditor to understand the shared control requirements between multiple cloud service providers and the customer organization?

1. A. Roles and responsibilities of the IT professionals working under a shared responsibility model
2. B. An industry-accepted cloud security framework for which all parties have obtained certification
3. C. Logs produced by a cloud access security broker (CASB) monitoring the multi-cloud solution
4. D. A risk and controls matrix that documents a clear set of actions for each party — đáp án hiện tại