Security controls include the physical, procedural, and technical mechanisms to safeguard systems. When assessing security controls, what is the best indicator that the controls are functioning as expected?

Whether the controls are appropriately implemented

Whether the controls are appropriately designed

Whether controls are producing the required results

Whether the controls align to the policy of an organization