Posted by & filed under .

A process by which an operator evaluates the effectiveness of the design and operation of a control in addressing the risk of noncompliance. The evaluation of controls may include assessing the underlying business process.