Watch this video on YouTube
Which of the following is the BEST way to determine whether new controls mitigate security gaps in a business system?