Câu 106: IIA-CIA-PART1: Certified Internal Auditor - Part 1 The Internal Audit Activitys Role in Governance Risk and Control

How should management obtain assurance that employees are complying with the organization's security policy?

1. A. Regularly conduct independent reviews of employees' security practices. — đáp án hiện tại
2. B. Routinely survey staff so that information related to security practices can be submitted anonymously.
3. C. Rely on exception reports to identify errors.
4. D. Enforce a policy that requires all employees to sign a statement that they will adhere to the organization's security policies.