Take the following as truth: Assess risk and determine needs Establish a central management focal point Implement appropriate policies and related controls Promote awareness Monitor and evaluate policy and control effectiveness
Then the following statement: "Policy and control effectiveness must be monitored and evaluated." is true, false, or inconclusive?