The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls...

 Why External Audit Provides the Best Perspective:

External auditors are independent and unbiased, offering a certifiable assessment of established controls.

They evaluate compliance with standards, effectiveness of controls, and areas needing improvement.

 Why This is Correct:

External audits provide an objective view that internal teams or penetration testers may not.

Results from an external audit are often recognized for certifications or regulatory compliance.

 Why Other Options Are Incorrect:

A. Penetration Testers: Focus on identifying vulnerabilities, not certifying overall controls.

C. Internal Audit: Valuable but lacks the independence of an external review.

D. Forensic Experts: Specialize in investigating incidents, not evaluating ongoing controls.

 References:

EC-Council emphasizes the role of external audits in providing comprehensive and independent validation of security controls.