After updating its acceptable use policy, a company requires every employee to electronically confirm that they have received and read the new version. The confirmations are recorded and retained by HR. Which compliance monitoring element does this represent?
Select an answer to reveal the explanation.
Short Explanation
An acknowledgement is the digital equivalent of signing the sheet that says you got the policy and you read it. It's a record that each person saw the rule, which matters when someone later says they never knew. The trap is sampling, which is how an auditor tests records, not how you collect them.
Full Explanation
Acknowledgements are records in which individuals confirm that they have received, read, and agree to follow a policy or requirement. Collecting an electronic acknowledgement from every employee after an acceptable use policy update creates evidence that each person was informed, which supports enforcement and demonstrates to auditors and regulators that the policy was communicated. Retaining the records with HR keeps them available for disciplinary or legal proceedings. Sampling is an audit data-gathering technique in which a subset of records or transactions is examined to draw conclusions about the whole population; an auditor might sample these acknowledgements, but the act of collecting them is not sampling. Gap analysis compares current practices against a target framework or standard to identify missing controls; it does not involve individuals confirming that they read a policy. Benchmarking compares the organization's performance or practices with peers or industry measures; it is an assessment engagement type rather than a record of individual awareness. Exam caveat: attestation, also listed under compliance monitoring, usually refers to a formal declaration that controls or obligations are being met, often by management or a responsible party, which is broader than confirming receipt of a document. Operational check: compare the list of acknowledgements against the current employee roster and follow up on anyone who has not confirmed.