How might a WLAN administrator ensure compliance with security audits?

How might a WLAN administrator ensure compliance with security audits?

• A. Document audit procedures in the security policy
• B. Disable audit logs
• C. Hide the security policy
• D. Rely on ad hoc procedures

Answer: (A)

Documenting audit procedures in the security policy is the best approach because audits rely on repeatable, verifiable processes. When audit steps, logging requirements, evidence collection, responsibilities, retention, and remediation plans are formally written into the policy, you create a clear, auditable baseline that auditors can review and repeat. This shows due diligence, ensures consistency across the WLAN environment, and provides the necessary guidance for implementing and demonstrating controls during reviews. Disabling audit logs removes the traceability audits depend on, making it impossible to prove what happened or that controls were in place. Hiding the security policy reduces visibility and accountability, which also fails to meet audit expectations. Relying on ad hoc procedures means there’s no consistent method to collect evidence or verify controls, leading to gaps and noncompliance during audits.

Documenting audit procedures in the security policy is the best approach because audits rely on repeatable, verifiable processes. When audit steps, logging requirements, evidence collection, responsibilities, retention, and remediation plans are formally written into the policy, you create a clear, auditable baseline that auditors can review and repeat. This shows due diligence, ensures consistency across the WLAN environment, and provides the necessary guidance for implementing and demonstrating controls during reviews.

Disabling audit logs removes the traceability audits depend on, making it impossible to prove what happened or that controls were in place. Hiding the security policy reduces visibility and accountability, which also fails to meet audit expectations. Relying on ad hoc procedures means there’s no consistent method to collect evidence or verify controls, leading to gaps and noncompliance during audits.