Watch this video on YouTube
Which of the following should NOT be included in the security control assessment plan?