CRISC Certified in Risk and Information Systems Control – Question453

The MAIN purpose of conducting a control self-assessment (CSA) is to:

A.
reduce the dependency on external audits
B. gain a better understanding of the risk in the organization
C. gain a better understanding of the control effectiveness in the organization
D. adjust the controls prior to an external audit

Correct Answer: C