An audit with a broad scope that includes supply chain, configuration, support, monitoring, and cybersecurity factors is known as what?

An audit with a broad scope that includes supply chain, configuration, support, monitoring, and cybersecurity factors is known as what?

• A. Compliance audit
• B. System/process audit
• C. Risk assessment
• D. Penetration test

Answer: (B)

Think of an audit that looks at how all the parts of the environment work together—the systems, the processes that run them, and the controls that cover procurement and the supply chain, how configurations are managed, how support and monitoring are performed, and how cybersecurity measures are integrated. That kind of review evaluates whether those processes are designed and operating effectively across the entire system, not just checking a single rule or performing a one-off test. A compliance audit focuses on meeting external standards or internal policies, a risk assessment identifies potential threats and their impact without validating ongoing operations, and a penetration test simulates attacks to find exploitable weaknesses. The broad, end-to-end nature described fits a system/process audit, which assesses the overall governance and operation of the system and its interrelated components.

Think of an audit that looks at how all the parts of the environment work together—the systems, the processes that run them, and the controls that cover procurement and the supply chain, how configurations are managed, how support and monitoring are performed, and how cybersecurity measures are integrated. That kind of review evaluates whether those processes are designed and operating effectively across the entire system, not just checking a single rule or performing a one-off test. A compliance audit focuses on meeting external standards or internal policies, a risk assessment identifies potential threats and their impact without validating ongoing operations, and a penetration test simulates attacks to find exploitable weaknesses. The broad, end-to-end nature described fits a system/process audit, which assesses the overall governance and operation of the system and its interrelated components.