Which of the following is the reason for designing the Consensus Assessments Initiative Questionnaire (CAIQ)?

Which of the following is the reason for designing the Consensus Assessments Initiative Questionnaire (CAIQ)?
A . Cloud service providers need the CAIQ to improve quality of customer service.
B . Cloud service providers can document their security and compliance controls.
C . Cloud service providers can document roles and responsibilities for cloud security.
D . Cloud users can use CAIQ to sign statement of work (SOW) with cloud access security

View Answer

Answer: B

Explanation:

The reason for designing the Consensus Assessments Initiative Questionnaire (CAIQ) is to enable cloud service providers to document their security and compliance controls in a standardized and transparent way. The CAIQ is a set of yes/no questions that correspond to the controls of the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM), which is a framework of best practices for cloud security. The CAIQ helps cloud service providers to demonstrate their adherence to the CCM and to provide evidence of their security posture to potential customers, auditors, and regulators. The CAIQ also helps cloud customers and auditors to assess the security capabilities of cloud service providers and to compare different providers based on their responses. The CAIQ is part of the CSA STAR program, which is a cloud security assurance program that offers various levels of certification and attestation for cloud service providers.12

Reference: What is CAIQ? | CSA – Cloud Security Alliance3; Consensus Assessment Initiative Questionnaire (CAIQ) v3.1 [No | CSA4