Certified Cloud Security Professional – CCSP – Question119

Which of the following is NOT a focus or consideration of an internal audit?

A.
Certification
B. Design
C. Costs
D. Operational efficiency

Correct Answer: A

Explanation:

Explanation: In order to obtain and comply with certifications, independent external audits must be performed and satisfied. Although some testing of certification controls can be part of an internal audit, they will not satisfy requirements.