Where systems live changes how you audit them. Traditional audits assumed the organization owned the building, the servers and the network, so auditors could walk the data center, inspect configurations and interview the administrators directly. Cloud and hybrid environments split control between the organization and one or more providers, and the audit approach has to follow that split. The core question in every location is the same: who operates this control, and where does the evidence that it works come from?
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.