The main reason you have been hired at a company is to bring the network security of the organization up to current standards. A high priority is to have a full security audit of the network as soon as possible. You have chosen an Operational Audit and are describing it to your coworkers. Which of the following best describes an Operational audit?

A.
This type of audit is typically done by a contracted external team of security experts who check for policy compliance.

B.
This type of audit is usually done by internal resources to examine the current daily and on- going activities within a network system for compliance with an established security policy.

C.
This type of audit is typically done by an internal team who ensures the security measures are up to international standards.

D.
This type of audit is usually done by the current network administrators who ensure the security measures are up to international standards.

E.
This type of audit is usually conducted by external resources and may be a review or audit of detailed audit logs.