A financial services company must comply with an industry regulation that requires an independent review of their security posture. Which of the following BEST ensures the company’s ongoing compliance with this requirement?
Performing an independent third-party audit
Conducting a self-assessment using internal resources
Incorporating a right-to-audit clause in third-party vendor agreements
Generating internal compliance reports quarterly