A healthcare organization is developing its data privacy and security strategy. The leadership team is exploring different methods for monitoring, evaluating, and improving security practices to ensure compliance with the Health Insurance Portability and Accountability Act $($HIPAA$).$ In electing to use a program that provides independent oversight and assurance, what would be the MOST appropriate measure to maintain and oversee these controls?

A$.$Establishing a compliance program

B$.$Conducting a self$-$assessment

C$.$Implementing a security awareness program

D$.$Outsourcing security operations to a Managed Security Service Provider