CGRC - Assessment/Audit of Security and Privacy Controls - Assessment Methods: Interview, Examine, Test