GRCLibrary.ai

Procedure

Control Testing Procedure

This procedure defines the processes for testing the design and operating effectiveness of internal controls across the organization's governance, risk, compliance, security, and operational domains. Control testing provides objective evidence that controls are functioning as intended and supports certification, audit readiness, and continuous assurance activities.

Type
Procedure
Version
1.1.10
Date
2026-10-27
Owner
Chief Compliance Officer
Approving authority
Chief Information Officer
Classification
Public
Confidentiality
Public
Category
Compliance Management
Review frequency
Annual and upon material control framework change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Scope
  • Roles and responsibilities
  • 1. Control testing planning
  • 2. Control testing methodology
  • 3. Evidence collection
  • 4. Testing results and findings
  • 5. Reporting
  • 6. Remediation and re-testing
  • 7. Control Testing Register
  • 8. Metrics
  • Framework alignment

Frameworks it maps to

Related documents