Q13
Single choice
According to best practice, which of the following groups is the MOST effective in performing an information security compliance audit?