Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. ensure that risk is mitigated by the control The PRIMARY objective of testing the effectiveness of a new control before implementation is to "B. ensure that risk is mitigated by the control." Testing the control before full implementation helps verify that the control is capable of effectively mitigating the identified risk. It ensures that the control is designed and configured correctly to address the specific risk it is intended to manage.
B. ensure that risk is mitigated by the control The primary objective of testing a control before implementation is to ensure that the control effectively mitigates the risk it is designed to address. By testing the control, the organization can confirm that it works as intended and that it effectively reduces the risk to an acceptable level. Option A, "comply with the organization's policy", could be a secondary reason but is not the primary objective. Option C, "confirm control alignment with business objectives", and option D, "measure efficiency of the control process", are benefits of testing, but the primary reason is to ensure that the risk is being effectively mitigated by the control.
The main objective of applying controls is to reduce the risk to an acceptable level i.e. the control works as intended to mitigate the risk. Otherwise, the control will be ineffective