Which term denotes a one-time evaluation of a security posture?

• A. Risk Management Processes
• B. Simulation Test
• C. Parallel Test
• D. Auditing Control

Answer: (D)

A one-time evaluation of security posture is an audit. An audit is a formal, point-in-time examination of an organization’s security controls, policies, and risk management practices to determine if they are properly designed and operating effectively. An auditing control is the mechanism that ensures such audits can be conducted—providing evidence and oversight for the assessment. The other terms describe ongoing processes or different testing approaches: risk management processes are continuous activities to identify and mitigate risk; a simulation test is a practice exercise to evaluate response; a parallel test involves running a new system alongside the old to compare behavior. So auditing control best captures the idea of a single, formal evaluation of security posture.