Certified in Risk and Information Systems Control (CRISC) — Question 486

The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

Answer options

• A. comply with the organization’s policy.
• B. consider automating the control.
• C. evaluate the degree of risk mitigation.
• D. measure efficiency of the control process.

Correct answer: C

Explanation

The correct answer, C, highlights the importance of understanding how well the control will reduce risks before it is put in place. Options A and B focus on policy compliance and automation, which are not the primary objectives of pre-implementation testing. Option D addresses efficiency, but does not directly relate to risk mitigation, making it less relevant.