Risk Assessment How did you learn that (control activity) was necessary to ensure compliance? This question flushes out the risk assessment component.
{"Image DocumentName": "Information and Communications", "Image ImageDescription": "How and when do you notify people the (control activity) is required? This question flushes out the information and communication component.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}