Exam CRISC topic 1 question 804 discussion

The most important factor for evaluating the operational effectiveness of a newly implemented control is C. The source data used for control performance is accurate and complete. Here's why: Data integrity: Accurate and complete source data is the foundation for reliable and meaningful evaluation of control performance. Without it, any conclusions drawn about the effectiveness of the control are likely to be inaccurate and misleading. Decision-making: Accurate source data allows for informed decision-making about whether the control is functioning as intended and whether it requires adjustments or improvements. Reliability and relevance: Accurate data ensures the reliability and relevance of the evaluation. It enables comparisons with previous assessments and provides a clear picture of the control's performance over time.

The accuracy and completeness of the source data are crucial for evaluating the operational effectiveness of a control. If the data used for assessing the control's performance is unreliable or incomplete, it can lead to inaccurate conclusions about the control's effectiveness. The quality of the underlying data is foundational to the overall assessment process. Continuous auditing techniques (Option A) and timely monitoring and reporting by control owners (Option B) are important, but they depend on the integrity of the source data. Independent verification of self-assessment testing results (Option D) is also valuable for validation but may not be as foundational as ensuring the accuracy and completeness of the source data.

without C there can be no D.

Going with D.

C. The source data used for control performance is accurate and complete. The reason this is the most important aspect for evaluating the operational effectiveness of a newly implemented control is that the accuracy and completeness of the source data are the foundation for determining control performance. If the source data is inaccurate or incomplete, the results of control monitoring and testing will be unreliable, making it difficult to assess the true effectiveness of the control.

The effectiveness of the controls is verified through self-assessments mechanisms or carried out by a third party (CRISC manual, 'Self-assessments' and 'Third-party assurance').

I will go with D, as this is by independent control tester, which is more accpetable.

Why not B, A is very expensive whereas testing of control is not a regular activity.

A: is correct when I checked about the effectiveness of controls. It involves auditing. Whether it has the right control design and the appropriate person to execute and monitor the control.

I think D make more sense to me