medium
Single Answer
0

Jackie is an auditor and has completed an SOC 2, Type 2 audit. Her firm then provides a statement about the organization’s audit results and posture. What is this process known as?

Answer Options

A

Penetration testing

B

Audit sign- off

C

Regulatory defense

D

Attestation

Correct Answer: D

Explanation

Auditors provide a statement about an organization’s posture as part of an attestation process. This provides assurance that the auditors have reviewed the organization’s practices and have found them suitable or that deficiencies have been identified. Penetration testing is the process of testing the security of an organization and is not an audit. Audit sign-off occurs when management signs an audit to acknowledge their awareness of its results. Regulatory defense was made up for this question.