After a regulatory-change record adds a new citation, who should decide whether existing controls already cover it?
Select an answer to reveal the explanation.
Short Explanation
Somebody named has to stare at the new rule and say 'we already cover this' or 'we don't.' Assign control/compliance owners to run that gap check. Mid-servers and license auditors aren't the right jury.
Full Explanation
Regulatory-change gap analysis assigns owners to evaluate whether existing controls and objectives satisfy a new citation. Named accountability drives remediate-or-accept decisions. Automated infrastructure components or unrelated asset roles do not replace compliance ownership of coverage evaluation.