CGRC - Assessment/Audit of Security and Privacy Controls - Non-Compliant Findings Reassessment and Validation