Take the following as truth: Monitoring various aspects of the organization's security-related activities by testing controls, accounting for the number and types of security incidents, and evaluating compliance with policies.
Then the following statement: "Security-related activities are subject to monitoring." is true, false, or inconclusive?