Which of the following is the BEST way to determine whether new controls mitigate security gaps in a business system?
A . Conduct a compliance check against standards.
B . Perform a vulnerability assessment.
C . Measure the change in inherent risk.
D . Complete an offsite business continuity exercise.
Answer: B