Which term describes the process of reviewing and validating password policy settings to ensure compliance?

Which term describes the process of reviewing and validating password policy settings to ensure compliance?

• A. Auditing
• B. Password History
• C. Minimum Age
• D. MFA

Answer: (A)

Auditing is the practice of examining and validating security controls to ensure they are properly configured and enforced. When applied to password policies, auditing involves checking that the policy settings are actually implemented by the system, that changes are tracked and documented, and that there’s evidence of compliance with standards or regulations. This helps identify misconfigurations, drift from baselines, or gaps in enforcement, and it supports governance and risk management.

The other options describe elements of password policies or authentication methods themselves, not the process of reviewing and validating those settings. Password History is about storing previous passwords to prevent reuse, Minimum Age sets the minimum time between changes, and MFA is a method requiring multiple authentication factors.