A new state privacy citation requires encryption, and an encryption control objective already exists. What is the preferred mapping approach?
Select an answer to reveal the explanation.
Short Explanation
New citation, same lock—do not build a second lock factory. Map the state privacy citation onto the encryption control objective you already have. Cloning forests of controls or twin objectives just doubles the homework.
Full Explanation
Extending citation mappings to an existing control objective reuses proven control design when requirements overlap. Mapping the new state privacy citation to the existing encryption objective preserves many-to-one authority coverage without duplicate controls. Cloning controls per citation, delaying mapping, or creating parallel identical objectives inflate testing load without improving encryption outcomes.