information sec

"regular reporting" C

Internal Audit. As it provides an unbiased, independent evaluation of compliance without any conflict of interest.

D for sure. ISACA is all about audits being the most confirmatory action available

D. Internal audit. Internal audit functions are typically responsible for providing independent and objective assessments of an organization's operations, including compliance with standards and regulations. They are well-positioned to assess and report on the organization's compliance to a global security standard. Internal auditors have the expertise and knowledge to evaluate controls, processes, and activities related to information security and compliance. They can provide an unbiased and comprehensive assessment of the organization's adherence to the security standard and report their findings to the board.

D. Internal audit Internal audit is best suited to provide regular reporting to the board regarding the status of compliance to a global security standard. Internal audit functions are typically responsible for evaluating and assessing an organization's internal controls, including those related to compliance with various standards and regulations. They have the expertise and independence to provide objective and comprehensive reports on compliance status, potential risks, and recommendations for improvements. This makes them the most suitable choice for reporting on compliance to a global security standard to the board of directors.

nternal audit functions are typically responsible for assessing and evaluating an organization's adherence to various standards, including security standards. They have the expertise and independence to objectively review and report on compliance with global security standards. Internal audit teams are well-positioned to monitor and evaluate the effectiveness of controls, identify any gaps or non-compliance, and provide recommendations for improvement.

D. Internal audit. Internal audit functions are typically responsible for providing independent and objective assessments of an organization's operations, including compliance with standards and regulations. They are well-positioned to assess and report on the organization's compliance to a global security standard. Internal auditors have the expertise and knowledge to evaluate controls, processes, and activities related to information security and compliance. They can provide an unbiased and comprehensive assessment of the organization's adherence to the security standard and report their findings to the board.

you need internal audit to validate the effectiveness of the compliance of a standard.

D- because Information Security does not report to the Board directly on regular basis. If ISM was mentioned then it would have been C.

Don't know how C can be selected for an answer here.

This is either a trick question or a badly written one... IMO, infosec department/manager would provide regular reporting and would use internal audit (a process) to establish the status of compliance. In other words, correct answer would be C. However, if they the question doesn't actually list department but functions, then the correct answer would be internal audit (D). I'm leaning more towards D, so I'm gonna take my chances with it. :)

This is tricky. The way the answers are phrased makes it sound like departments within a company (A-C). However "Internal Audit" isn't a department...that's too vague. No company has a department called "Internal Audit". However if the wording for D would have been "An internal audit" then maybe it would be correct. However it's worded as if it's a department, which it's not. Therefore the answer is C. Out of the 3 departments listed (A-C), C is the best answer. D is a trick answer.

The best option for providing regular reporting to the board regarding the status of compliance to a global security standard would be D. Internal audit. Internal audit is responsible for evaluating and monitoring the effectiveness of risk management, control, and governance processes within an organization. They have the expertise to assess compliance with various standards and regulations, including global security standards. Internal audit is independent and objective, which makes them well-suited to provide accurate and unbiased reporting to the board. They can conduct regular audits and provide detailed reports on the organization's compliance status, highlighting any gaps or areas for improvement.

D. Internal audit