Which term corresponds to Regular reviews to ensure policy compliance?

Which term corresponds to Regular reviews to ensure policy compliance?

• A. Compliance monitoring
• B. Audit controls
• C. User identity creation
• D. Access transformation initiatives

Answer: (B)

Regular reviews to ensure policy compliance rely on audit controls—the mechanisms that create, preserve, and present an auditable trail of actions, access, and policy adherence so audits and reviews can verify compliance. These controls provide the evidence needed for periodic checks, including logs, change histories, and access records that reviewers can examine. Compliance monitoring is related as ongoing oversight, but audit controls specifically supply the verifiable record required for formal reviews. The other options don’t fit because identity creation is about provisioning identities, and access transformation initiatives focus on changing how access is managed rather than providing audit evidence.

Regular reviews to ensure policy compliance rely on audit controls—the mechanisms that create, preserve, and present an auditable trail of actions, access, and policy adherence so audits and reviews can verify compliance. These controls provide the evidence needed for periodic checks, including logs, change histories, and access records that reviewers can examine. Compliance monitoring is related as ongoing oversight, but audit controls specifically supply the verifiable record required for formal reviews. The other options don’t fit because identity creation is about provisioning identities, and access transformation initiatives focus on changing how access is managed rather than providing audit evidence.