CompTIA Security+ (SY0-701) SY0-701 — Question 521

An organization has a new regulatory requirement to implement corrective controls on a financial system. Which of the following is the most likely reason for the new requirement?