CIA Part 1 - Governance, Risk Management, and Control - Assessing the Adequacy and Effectiveness of Controls