The MOST Common Method to Get an Unbiased Measurement of the Effectiveness

The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to_________________________.

A) assign the responsibility to the information security team
B) assign the responsibility to the team responsible for the management of the controls
C) perform an independent audit of the security controls
D) create operational reports on the effectiveness of the controls.