Certified Information Privacy Manager (CIPM) — Question 94
An organization’s internal audit team should do all of the following EXCEPT?
Answer options
- A. Implement processes to correct audit failures.
- B. Verify that technical measures are in place.
- C. Review how operations work in practice.
- D. Ensure policies are being adhered to.
Correct answer: A
Explanation
The correct answer is A because the internal audit team's role is to assess and report on compliance and effectiveness, rather than to implement corrective processes. Options B, C, and D reflect appropriate responsibilities of the internal audit team, which include verifying measures, reviewing operations, and ensuring adherence to policies.