問題文
A municipality receives an independent assurance report from its cloud provider. The report covers the twelve months ending in March and names two data centers. The municipality also uses a third data center that the provider opened in June. How should the report be used?
選択肢
- The report supports conclusions about the already reviewed centers because the assurance covers only the stated audit period and separate documentation is needed for the newly added location.
- The report supports conclusions about the continuous control state because the assurance covers only the automated evidence feed and separate documentation is needed for the manual sampling method.
- The report supports conclusions about the current calendar year because the assurance covers only the latest control listing and separate documentation is needed for the earlier reporting cycle.
- The report supports conclusions about the entire provider estate because the assurance covers only the signed vendor note and separate documentation is needed for the planned growth phase.