Mix is the chief security officer (CSO) of MLX Corp, and he is helping the security managers find the best security controls to protect their assets. Which technique does he advise the security managers to use to select the best controls?

Domain 6: Security Assessment and Testing Practice Questions
Questions from the following topics are included in this domain: 
Designing and validating assessments and tests
Conducting security control testing
Collecting security process data
Analyzing test output data and generating reports 
Conducting and facilitating security audits