Comprehensive and Detailed Explanation:
In PKI, when a document is digitally signed:
The signer uses their private key to create the signature.
The recipient uses the signer's public key to decrypt and verify the signature.
If the decrypted hash matches the document's computed hash, the document is authentic and unaltered.
Option A: Correct - verification is done with the public key.
Option B: Incorrect - the private key is only used to sign, not verify.
Option C: Wrong - the receiver's public key is irrelevant.
Option D: Not applicable - audit history is not part of PKI validation.
# ISACA Reference: CISA Review Manual 27th Edition, Domain 5, section on PKI and digital signatures.

The first step when developing a data loss prevention (DLP) solution for a large organization is to conduct a data inventory and classification exercise. This step is essential to identify the types, locations, owners, and sensitivity levels of the data that need to be protected by the DLP solution. A data inventory and classification exercise helps to define the scope, objectives, and requirements of the DLP solution, as well as to prioritize the data protection efforts based on the business value and risk of the data. A data inventory and classification exercise also enables the organization to comply with relevant laws and regulations regarding data privacy and security.
The other options are not the first step when developing a DLP solution, but rather subsequent steps that depend on the outcome of the data inventory and classification exercise. Identifying approved data workflows across the enterprise is a step that helps to design and implement the DLP policies and controls that match the business processes and data flows. Conducting a threat analysis against sensitive data usage is a step that helps to assess and mitigate the risks associated with data leakage, theft, or misuse. Creating the DLP policies and templates is a step that helps to enforce the data protection rules and standards across the organization.
References:
* ISACA CISA Review Manual 27th Edition (2019), page 247
* Data Loss Prevention-Next Steps - ISACA1
* What is data loss prevention (DLP)? | Microsoft Security