Watch this video on YouTube
Cross-referencing selected controls with organizational policy is important because: