A transit authority wants every employee to confirm they read the acceptable-use policy. Which lifecycle approach fits this awareness need?
Select an answer to reveal the explanation.
Short Explanation
Reading a policy is a people checkbox, not a packet capture. Acknowledgment campaigns and attestations collect human confirmation. Save technical control tests for systems and processes that need operational evidence.
Full Explanation
Policy awareness commonly uses acknowledgment or attestation-style workflows that ask employees to confirm they read and accept a published policy. That lifecycle differs from technical control testing, which evaluates whether a designed control operates effectively on scoped entities. Mixing the two confuses evidence types and owners; IRM supports both patterns for their respective purposes.