CGRC - Assessment/Audit of Security and Privacy Controls - Assessment Scoping: Assets, Methods, and Level of Effort