CISSP: Certified Information Systems Security Professional

Auditor neutrality ensures the independence and objectivity required for credible audit findings. An audit does not inherently require a third-party or certified internal auditor, and its criteria need not be an industry framework because applicable policies, contractual obligations, and regulatory requirements can also serve as audit criteria.