Certified in Risk and Information Systems Control (CRISC) — Question 1186
Which of the following provides the BEST indication that existing controls are effective?
Answer options
- A. Control logging
- B. Control design
- C. Control testing
- D. Control documentation
Correct answer: C
Explanation
Control testing is the most effective way to assess whether the controls in place are functioning as intended. While control logging, design, and documentation are important aspects of controls, they do not provide direct evidence of their operational effectiveness.