This presentation will explore the audit of cybersecurity and cloud schemes, covering key elements such as the Cloud Control Matrix (CCM) and STAR certification established by the Cloud Security Alliance (CSA). The differences between traditional auditing and cloud auditing will be analysed, including implementation models, outsourcing of services as well as the use of specialised tools. In addition, we will discuss the profile of auditors in the digital age, who must possess advanced technical skills, up-to-date regulatory knowledge and an understanding of cloud models. We will discuss the adaptation of audit practices to the challenges and opportunities presented by the cloud, as well as the challenge of maintaining security and regulatory compliance in these constantly evolving infrastructures.