Given a premise, retrieve a hypothesis that is entailed by the premise.Assess risk and determine needs Establish a central management focal point Implement appropriate policies and related controls Promote awareness Monitor and evaluate policy and control effectiveness
Policy and control effectiveness must be monitored and evaluated.
There is no need to monitor or evaluate policy and control effectiveness.