After scoping the “Restrict privileged access” control objective to the ERP entity, what lifecycle step creates the owned work item for the ERP manager?
Select an answer to reveal the explanation.
Short Explanation
Scoping the objective to ERP isn’t the finish line—generation creates the actual control instance the ERP manager owns. That’s the work item people attest and test. Without generation, the objective is still a template floating above the entity.
Full Explanation
Control generation applies a scoped control objective to a specific entity and creates a control record with ownership. That instance is what enters testing, attestation, and issue workflows for the ERP manager. Authority documents and citations alone do not create entity-owned control work items.