Question

A privacy audit conducted six months ago identified several control deficiencies in a company's marketing data platform. Management submitted remediation plans and reported that all corrective actions are now complete. As the privacy solutions engineer supporting the audit function, what is the MOST important action to take before closing the audit findings?

Accepted Answer

Independently test the implemented controls to verify that the remediation is operating effectively

Answer

Accept management's completion attestation and formally close the findings in the audit tracking system

Answer

Schedule a full re-audit of the entire marketing data platform to reassess all risks

Answer

Update the risk register to reflect that residual risk has been reduced to an acceptable level