Certified in Risk and Information Systems Control (CRISC) — Question 139

The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

Answer options

• A. comply with the organization's policy
• B. ensure that risk is mitigated by the control
• C. confirm control alignment with business objectives
• D. measure efficiency of the control process

Correct answer: B

Explanation

The correct answer is B, as the primary aim of testing a control is to ensure that it effectively mitigates risks before it is put into place. Options A, C, and D, while relevant, are secondary concerns that do not focus on the immediate need to reduce risk, which is the foremost priority in this context.