security controls place limits on activities that might pose a risk to an organization. ricky, a security engineer for his company, is performing a review and measurement of all controls to capture changes to any environment component. what is this called?
