What is the difference between a security audit and a security assessment?
-
A
An audit measures compliance against a defined standard; an assessment evaluates overall security posture and risk
-
B
An assessment is more formal and legally binding than an audit
-
C
They are identical processes with different names
-
D
An audit focuses on vulnerabilities; an assessment checks policies only