1.    Cloud Governance Audit : Identify the Cloud services and resources that are in use to understand the effectiveness of the Customer’s Cloud security or risk management program. This includes identifying and analysing the company-wide Cloud Assets and Cloud Accounts.

2.    Cloud Network Configuration Management Audit : Verifying missing or inappropriately configured security controls related to external access and network security, which could result in a security exposure.

3.    Cloud Asset Configuration and Management Audit : The management of the Customer’s operating systems and security applications is verified to protect the security, stability, and integrity of the assets.

4.    Logical Access Control Audit : Focuses on identifying how users and permissions are set up for Cloud services ensuring that the Customer securely manages the credentials associated with Cloud accounts.

5.    Data encryption Audit: Understand where the data resides, and validate the methods that are used for protecting the data at rest and in transit.

6.    Security logging and monitoring Audit : Validating if audit logging is performed on the guest OS and critical application instances. Assessing the implementation and log storage are in alignment with the company policies and procedures. 

7.    Disaster recovery Audit : Disaster recovery controls are checked for operational effectiveness.

8.    Security Incident Response Audit : Incident management controls are checked for operational effectiveness.