CGRC - Assessment/Audit of Security and Privacy Controls - Stakeholder Roles and Responsibilities in Assessment