Which of the following would not be an appropriate step for an internal auditor to perform during an assessment of compliance with an organization's privacy policy?

Question

Quizplus · Accepted Answer

Evaluating the government's security measures is outside the scope of an internal auditor's assessment of the organization's compliance with its own privacy policy. The focus should be on the organization's internal practices and controls.

Which of the Following Would Not Be an Appropriate Step