“Using our approach, the client could test every instance of the given control on every asset recorded against the CBP." The Problem In...