How do you think that the selection of the appropriate preventative, detective and corrective controls applied in a specific situation or business operation should be guided by factors such as: - The legal obligations of the business - The contractual obligations of the business - The internal culture of the business - The nature of the experience that it wants its customers to have - The costs of implementing each specific control versus the benefits derived from that control in terms of things such as dollar savings, legal or contractual compliance, goodwill or reputation