CompTIA Security+ (SY0-701) SY0-701 — Question 347

After failing an audit twice, an organization has been ordered by a government regulatory agency to pay fines. Which of the following causes this action?