Watch this video on YouTube
A control self-assessment (CSA) yielded good results, but a subsequent audit identified high-risk issues. What is the MOST likely explanation?