Edit

Item

Description Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures, and to recommend necessary changes in controls, policies, or procedures.

Source https://csrc.nist.gov/glossary/term/audit

Context