How do you know if your system is meeting your security goals?
You can verify that controls are working, but how do you know if they are getting the job done?
What auditing practices or procedures would you implement for your organization? Why?
Sample Solution
