After conducting research, an organization has selected a suitable control framework. What should the organization do to select the correct controls to implemen...