ISC2 Certified Cloud Security Professional 2026 outline (effective Aug 1, 2026) · Domain 6: Legal, risk & compliance

Audit process, methodologies and adaptations for cloud: internal vs external audit, assurance challenges of virtualization, SOC reports, gap analysis, audit planning

Last reviewed September 29, 2026 · Leer en español

An audit is an independent, evidence-based examination of whether controls meet a defined standard. Auditing cloud services is different because the customer cannot inspect the provider's systems directly and because shared, virtualized infrastructure is hard to observe.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 3 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Study CCSP for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.

Open the CCSP study plan