The CIO of an organization has decided to assign the responsibility of internal IT audit...

 Conflict of Interest Explained:

Assigning internal IT audits to the IT team creates a situation where the same group is both implementing and auditing controls, compromising objectivity.

 Best Practice:

Audits should be conducted by independent teams or external auditors to ensure unbiased evaluations and integrity.

 Supporting Reference:

CCISO emphasizes the importance of maintaining independence in audit functions to avoid conflicts of interest and ensure credible assessments.