$1.$ Which U$.$S$.$ audit standard is often used to evaluate cloud providers?

$2.$ How many tiers the Cloud Security Alliance $($CSA$)$ Security, Trust, and Assurance Registry $($STAR$)$ program has.

$3.$ Name one of the countries that does not have a federal privacy law that complies with the Euro$-$pean Union $($EU$)$ General Data Protection Regulation?