A financial services company must comply with an industry regulation that requires an independent review of their security posture. Which of the following BEST ensures the company’s ongoing compliance with this requirement?
Conducting a self-assessment using internal resources
Incorporating a right-to-audit clause in third-party vendor agreements
Performing an independent third-party audit
Generating internal compliance reports quarterly