Certified in Risk and Information Systems Control (CRISC) — Question 285

Which of the following is the MOST important reason to test new controls?

Answer options

• A. To verify controls work as intended.
• B. To justify the cost of control investment.
• C. To identify exceptions that elevate risk.
• D. To ensure an accurate and up-to-date controls register.

Correct answer: A

Explanation

The correct answer, A, highlights the necessity of confirming that controls function as expected to manage risks effectively. While options B, C, and D are also important, they are secondary to the primary goal of ensuring that controls are operational and effective in mitigating risks.