A customer shows a good level of maturity regarding IT security compliance when they
understand two essential elements as a basis for achieving and demonstrating compliance. One
element is a security policy that clearly states goals. What is the second essential element?

A.
Audit

B.
Workflow

C.
Data integrity

D.
Administration