Module 1 challenge — Question 3

Amir is an auditor at a small organization. Amir’s job is to ensure that the organization’s security system follows relevant laws and regulations. Which type of audit should Amir conduct?