CompTIA Security+ Exam Prep

Answer: C - The auditor provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives. The auditor is brought in to an organization to determine if the controls that have been implemented by the administration for either technical or physical attributes have been reached and have complied with the security objectives that are either required for the organization by legislation or that have been deemed necessary by the governance of the organization.