Page 1268 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 1268
Security audits and reviews are commonly done to guarantee that
controls are implemented as directed and working as desired. It’s
common to include audits and reviews to check patch management,
vulnerability management, change management, and configuration
management programs.
