How should controls be designed by an organization?

How should controls be designed by an organization?
A . By the internal audit team
B . Using the ISO27001 framework
C . By the cloud provider
D . Using the organization’s risk management framework

View Answer

Answer: A

Explanation:

Reference: https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2016/internal-control-key-to-delivering-stakeholder-value