From the course: ISACA Certified in Risk and Information Systems Control (CRISC) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Control testing

Control testing

From the course: ISACA Certified in Risk and Information Systems Control (CRISC) Cert Prep

Start my 1-month free trial Buy for my team

Control testing

“

- [Instructor] So once a control is designed, we want to make sure that it's implemented within the system correctly. I want to make sure that we're clear on ISACA terminology here. They are talking about control testing in a similar way of system testing. We are not talking about control testing if you and your organization go in after a control is implemented and check to make sure that it's actually performing or that people are executing it. They call that control monitoring, and we're going to talk about that in a couple slides. So control testing means are we sure that we're implementing the controls correctly? If we make a change to the environment, are the controls that are in place already still functioning? And when we generally combine systems with code, so we merge that code into production, how is the control going to function? So without the controls actually being implemented in the same way that they…

Contents