Certified in Risk and Information Systems Control (CRISC) — Question 374

Which of the following is the BEST way to ensure ongoing control effectiveness?

Answer options

• A. Periodically reviewing control design
• B. Establishing policies and procedures
• C. Measuring trends in control performance
• D. Obtaining management control attestations

Correct answer: C

Explanation

Measuring trends in control performance (C) allows organizations to identify patterns and make informed decisions about control improvements. While reviewing control design (A), establishing policies (B), and obtaining attestations (D) are important, they do not provide the same ongoing insight into control effectiveness as trend analysis does.