After a city IT reorg mid-cycle, the group that owns a generated access-control record moves to a new service desk. How should ownership be handled?
Select an answer to reveal the explanation.
Short Explanation
The control is still the same lock on the same door—only the key-holder changed. Swap the owning group on the live record. Deleting and regenerating throws away mid-cycle history for no good reason.
Full Explanation
Generated controls are persistent compliance objects tied to an entity and objective. Mid-cycle organizational changes should update ownership fields (owning group/user) on the existing control so accountability stays accurate. Deleting the control breaks test history, open issues, and evidence linkage; regeneration is for scoping or content changes, not a simple owner reassignment.