Which of the following BEST enables the timely detection of changes in the security control environment?

Control self-assessment (CSA) involves the individuals directly responsible for the controls regularly evaluating their design and operational effectiveness, leading to timely detection of changes as they are closest to the daily operation of the controls.

Log analysis focuses on detecting security events or anomalies, not necessarily changes in the control environment itself, unless those changes manifest as logging failures.

Security control reviews are typically periodic audits or assessments performed by a separate function, which might not be timely enough for detecting immediate changes.

Random sampling checks are a method of auditing, which, like security control reviews, are usually periodic and may not provide timely detection of all changes.