TAI #37: Do We Really Understand Risk Control Effectiveness?

If we cannot explain how controls change the pathway to harm, we cannot confidently define, measure, or monitor their effectiveness.