Until We Know What is Occurring on Devices, We Cannot Determine if Our Controls are Effective at Managing Risk…