Certified Cloud Security Professional – CCSP – Question327

An audit scope statement defines the limits and outcomes from an audit.
Which of the following would NOT be included as part of an audit scope statement?

A.
Reports
B. Certification
C. Billing
D. Exclusions

Correct Answer: C

Explanation:

Explanation: Billing for an audit, or other cost-related items, would not be part of an audit scope statement and would instead be handled prior to the actual audit as part of the contract between the organization and auditors. Reports, exclusions to the scope of the audit, and required certifications on behalf of the systems or auditors are all crucial elements of an audit scope statement.