Assertion: risk | /r/RelatedTo | vulnerability
Facets:
Source sentences:
text: If it is determined that existing security measures are not sufficient to protect against the risks associated with the evolving threats or vulnerabilities, a changing business environment, or the introduction of new technology, then the entity must determine if additional security measures are needed.