In conclusion,
it's good to start contemplating the specific level of assurance that your
business requires based upon the business needs, and what is it that you
will use in order to get the level of assurance needed. Will you use
EuroCloud, StarAudit, Cloud Security Alliance STAR registry, and to what
level of assurance do you need?
An attestation based upon SOC reports, a certification based upon ISO
standards? Be sure to understand what your organization requires based
off of regulatory and legal implications.
It's also good for us to consider that the CSP, what
program they have established for audit.
All of this has levels of publicly accessible information until you're ready to
engage in a more committed fashion where you might sign an NDA in order to read
further information inside of a SOC 2 report.
I am so pleased and thankful that you joined me for this course,
Legal, Risk, and Compliance for CCSP.
Wishing you success as you're planning for the certification exam, and look
forward to seeing you around here again on Pluralsight!