A Dutch company is processing information from Dutch civilians; this implies applicability of some
Dutch regulations regarding the privacy of these civilians. The company is mandated to implement

security measures.
Which measure helps the company best in proving compliance with applicable regulations?

A.
Handing over the Non disclosure agreements (NDAs) that are signed by all employees.

B.
Handing over the results of a security audit.

C.
Installing a firewall to limit the access to the server.

D.
The execution of a penetration test on the server processing the sensitive information.

Explanation: