During a security audit, an auditor requests evidence that an organization's security controls are operating effectively. The organization provides system-generated reports, configuration screenshots, and policy documents. What type of audit activity is the auditor conducting?

Question

Accepted Answer

B. Control attestation and evidence review. Attestation is the process of validating that security controls are in place and operating effectively by reviewing evidence such as system-generated reports, configuration screenshots, and policy documents. This is a core component of security audits and compliance assessments within the security program management domain.

During a security audit, an auditor requests evidence that an organization's security controls are operating effectively. The organization provides system-generated reports, configuration screenshots, and policy documents. What type of audit activity is the auditor conducting?

Related Questions

Discussion