Watch this video on YouTube
Which of the following is not usually included in a security controls assessment report?