CompTIA Security+ Exam Prep

Answer: C - The auditor is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives. The auditor is brought in to an organization to determine if the controls that have been implemented by the administration for either technical or physical attributes have reached and complied with and the security objectives that are either required for the organization by legislation or have been deemed necessary by the governance of the organization.