Compliance testing
- Term
- Compliance testing
- Exam
- CISA
- Definition
Testing whether controls operate as designed and are being followed.
- Explained
Compliance tests, also called tests of controls, check whether controls exist and operate as designed — for example, whether change tickets were approved before deployment. They answer the question 'can we rely on this control?' and typically use attribute sampling.
- In practice
Checking a sample of change tickets for approval before deployment.
- Often confused with
- Substantive testing
- Exam angle
Asks: is the control working?
- Related