CGRC - Assessment/Audit of Security and Privacy Controls - Assessment Objectives, Scope, and Logistics