What is the main difference between security testing and security auditing?
A. Security testing focuses on physical security, while security auditing focuses on digital security
B. Security auditing is more about policy compliance, whereas security testing measures the strength of
security implementations
C. Security testing is only performed by internal staff, while security auditing requires external auditors
D. Security auditing cannot identify vulnerabilities, only security testing can
