Câu 467: CISA: Certified Information Systems Auditor

Which of the following is the BEST way for an IS auditor to validate that employees have been made aware of the organization's information security policy?

1. A. Interview employees to determine their level of understanding of the policy. — đáp án hiện tại
2. B. Compare the employee roster against a list of those who attended security training.
3. C. Review HR records for employee violations of the information security policy.
4. D. Review the training process to determine how policies are explained to employees.