CCSP - why is my answer incorrect?

[Spirnia]

I don’t understand why my answer is incorrect.

I feel the question has two correct answers.

Please advise!

[Spirnia]

Actually, I feel all four answers are correct according to my understanding of the lesson:

[nkeaton]

@Spirnia I would be curious where the question came from. A CSP is a Cloud Service Provider. I have not seen Partner as a term for CSP. Partner to me implies maybe a reciprocal agreement but not sure of the intent. A CSP has the facility, infrastructure, hardware, network, etc for customer xAAS service models. Unless it is in the SLA which have not seen on any that I have worked on, a CSP would not be doing traditional audits. One of the deficiencies of having systems and/or data in a CSP is the inability to do traditional auditing. I will look and see if I can find any references to Partner but have not seen that before (yet).

[Spirnia]

The question is from the CCSP official online curriculum.

And I also posted the lesson.

Please look over the lesson, as it includes audits too.

ChatGPT helped me better understand the nuance in the question.

I think the question excludes strategic planning and governance and includes only operational.

That could be one reason for the other three answers being incorrect.

[nkeaton]

@Spirnia Thank you. Never seen that terminology until now. It has been a long time since my CCSP and CCSK. I will look further. So does it say somewhere that CSP has 2 definitions as an acronym?

[Spirnia]

Cloud Service Partner is ISO terminology.

[nkeaton]

@Spirnia Thank you. That explains it then. I am very familiar with NIST and have some knowledge of other frameworks as part of governance. We definitely don’t use ISO. They are really expensive for one while NIST is no cost. For the acronym CSP, are they showing 2 definitions then?

[Spirnia]

It looks to me, from my research, that ISO uses the acronym CSN for Cloud Service Partner.

[nkeaton]

@Spirnia Thank you. Even more interesting.

[Steve-Wilme]

I suspect the clue in the context in which the question is asked.

Service Delivery and Management, probably doesn't involve assessing the marketplace for services; that'd be a marketing function in most organisations.

Additionally CSPs typically use external auditors and audit is a function of service delivery, as it needs to be independent.