Free CompTIA Security+ SY0-701 Practice Question
An organization is preparing a compliance report that will be submitted to both internal stakeholders and an independent regulatory body. Which of the following would be the BEST approach to ensure that the report satisfies the requirements of both parties?
Focus solely on external compliance mandates without detailing the internal governance mechanisms.
Include evidence of alignment with regulatory compliance standards and internal policies and procedures.
Summarize only the internal auditing procedures followed during the reporting period.
Limit the report to internal risk assessment findings without addressing regulatory compliance standards.
This question's topic:
CompTIA Security+ SY0-701 /
Security Program Management and Oversight
SAVE $49