A company is planning to hire an external firm to conduct a security assessment of its IT environment. Given the nature of the assessment being independent, which of the following options would BEST ensure an impartial and unbiased review of the company's security posture?
Engaging an independent third-party firm that specializes in security assessments.
Utilizing a firm that is a business partner of one of the company's major competitors to perform the audit.
Having an internal security team conduct the assessment.
Hiring a firm that also sells security solutions to the company while performing the audit.