Question $13$ of $40$

A company recently implemented some security controls to protect its network. The internal security team conducted a security assessment to validate the effectiveness of these controls. However, they want an objective evaluation of their security posture. What step should they take next?

conduct an internal vulnerability scan

write an incident response plan

perform an internal audit of security policies

hire a third$-$party to conduct an independent penetration test