Question $15$ of $40$

A company recently implemented some security controls to protect its network. The internal security team conducted a security assessment to validate the effectiveness of these controls. However, they want an objective evaluation of their security posture. What step should they take next?

hire a third$-$party to conduct an independent penetration test

write an incident response plan

perform an internal audit of security policies

conduct an internal vulnerability scan