What role does certification play in an information security program according to the NIST SP $800-100$ Information Security Handbook?

Group of answer choices

It serves as a procedural formality without practical impact.

It provides a detailed technical guide for system administrators.

It is an essential component that regularly checks the status of security controls.

It replaces the need for a security audit and ongoing system monitoring.