ANSI 859 recommends taking into account the following criteria when determining which control level applies...

Need to reuse the asset or earlier versions of the assets

Consequences of change to the enterprise or project

Cost of providing and updating the asset

Project impact, if change will have significant cost or schedule consequences