CC4.1 CC4
Monitoring Activities / CC4.1
Evaluating whether the controls are actually working
In plain English
The organization selects and performs ongoing checks, separate evaluations, or both, to confirm that controls are present and functioning rather than merely documented.