Directly testing control effectiveness was cited most often as an effective way to determine if the risk reduction techniques that had been agreed to were, in fact, operating effectively.
Remotely testing control effectiveness was cited most often as an effective way, to determine if the risk reduction techniques that had been agreed to, were in fact, operating effectively.