_________ is driven by an Audit or a Risk function to look at a specific control orcompliance issue.

• A. security audit
• B. vulnerability scan
• C. vulnerability assessment
• D. penetration test