Watch this video on YouTube
What mechanism is commonly used to provide an unbiased and objective evaluation of an organization's compliance with security policies and standards?