An auditor is auditing the services provided by a cloud service provider.

Personally identifiable information (Pll) is pseudonymized but not fully encrypted.

The cloud customer has encrypted the confidential data in the cloud using its own encryption keys.

The confidential data stored in the cloud is encrypted using encryption keys that are managed by the provider.

According to the cloud customer's data handling policy, all confidential data should be encrypted, but the confidential data stored in the cloud is well segmented but not encrypted.