Watch this video on YouTube
During a risk assessment, several controls are found to be ineffective. Under what condition could the overall control environment still be considered effective?