CISA Certified Information Systems Auditor – Question1022

Which of the following provides the BEST assurance that security policies are applied across business operations?

A.
Organizational standards are required to be formally accepted.
B. Organizational standards are enforced by technical controls.
C. Organizational standards are included in awareness training.
D. Organizational standards are documented in operational procedures.

Correct Answer: D