Because it's a requirement for all businesses is incorrect.
Explanation :
Independently verifying data security controls is crucial for preventing unauthorized access and potential data breaches, ensuring that policies and procedures effectively protect sensitive information.