A security professional closely examines their organization's network,
then evaluates potential risks to the network. Their goal is to ensure
internal safeguards and processes are effective. What security concept
does this scenario describe?
A. Communicating results
B. Controls assessment
C. Compliance regulations
D. Security recommendations