Certified in Risk and Information Systems Control (CRISC) — Question 821

An organization's control environment is MOST effective when:

Answer options

• A. controls operate efficiently.
• B. controls are implemented consistently.
• C. controls perform as intended.
• D. control designs are reviewed periodically.

Correct answer: C

Explanation

The correct answer is C because the effectiveness of a control environment hinges on whether controls are functioning as intended. While options A, B, and D are important aspects of a control environment, they do not guarantee that the controls are achieving their intended purpose.