A board member asks which internal function independently assesses security practice, detects waste and misuse, and recommends how to prevent recurrence. Which role is described?

Answer: A. The inspector general

NIST describes the inspector general as a statutory office that assesses security practices, detects fraud, waste, abuse or misuse, identifies operational deficiencies, ensures underlying problems are rectified, and recommends prevention.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.3.5 Related Roles — Inspector General