CISSP - Security Assessment and Testing - Section 6.5

Conduct or facilitate security audits that are internal, external, and third-party in scope.

Conduct or facilitate security audits across internal, external, and third-party scopes by coordinating evidence collection, interviewing control owners, and ensuring auditor independence. Recognise when the organisation's role shifts from auditee to audit sponsor, and adjust facilitation responsibilities accordingly.

Examworthy is not affiliated with or endorsed by (ISC)2. Original, blueprint-aligned practice material only.