ISACA Certified in Risk and Information Systems Control Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Keyword "PRIMARY", all these are needs for assessing controls, but the primary, ultimate need is to measure the controls objective achievement, that is the control achieving its objective within the context of business objectives

• Chose D1

  We should determine whether the control is functioning as intended. C is too broad as it refers to the outcome, not the control itself and not a method of assessment.

• Chose D1

  To provide assurance that controls are effective, they must be assessed for their operating effectiveness. This involves evaluating whether controls are operating as intended and whether they are achieving their objectives.