Assertion: audit | /r/HasProperty | based policy
Facets:
Source sentences:
text: IT audits are built on the basis of adherence to standards and policies published by organizations such as NIST and PCI, but the absence of such standards for enterprise communications audits means that these audits have to be based an organization's internal standards and policies, rather than industry standards.