A cloud auditor is a party that can perform an independent examination of cloud service controls. •A cloud auditor can evaluate the services provided by a cloud provider in terms of security controls, privacy impact, performance, etc. •Auditing is especially important for federal agencies. •Security controls are the management, operational, and technical safeguards or countermeasures employed within an organisational information system to protect the confidentiality, integrity, and availability of the system and its information. •For security auditing, a cloud auditor can make an assessment of the security controls in the information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to the security requirements for the system.
School