Which of the following processes evaluates the adherence of an organization to its stated security policy?

Which of the following processes evaluates the adherence of an organization to its stated security
policy?

A.
Vulnerability assessment

B.
Penetration testing

C.
Risk assessment

D.
Security auditing