For cloud security auditing, a cloud security auditor checks all the security controls in the information system so as to determine the measure to which the security controls are implemented accurately, are they operating as intended, and are they producing the desired outcome according to the security requirements for the system.