CompTIA Security+ (SY0-701) SY0-701 — Question 228

A Chief Information Security Officer would like to conduct frequent, detailed reviews of systems and procedures to track compliance objectives. Which of the following will be the best method to achieve this objective?