Watch this video on YouTube
What is the best approach to ensure the effectiveness of security controls?