An IT security assessment is an independent assessment of an organization's internal policies, controls, and activities.
a) true
b) false