An organization ' s internal audit activity is performing an audit of human resources.

A virtual private network allows users outside the office to securely send and receive data as though they were connected to the organization’s private internal network. VPNs commonly use encryption, tunneling, and authentication to protect remote access over public networks. A local area network is limited to a specific location such as an office or building. A wide area network links multiple locations over a broader geographic area, but it does not specifically describe secure remote access for employees. A global area network is broader and not the best fit for the described control. Internal auditors reviewing remote work should evaluate VPN configuration, encryption, authentication, logging, endpoint security, and access rights. Therefore, Option C is correct.