Which of the following BEST describes the concept of 'control testing' within a compliance monitoring program?
-
A
Reviewing whether written policies exist for each regulatory requirement
-
B
Evaluating whether specific controls operate effectively in practice to mitigate identified risks
-
C
Assessing whether the compliance department has sufficient staffing
-
D
Determining whether employees have signed the code of conduct