Which task is about Control Assessments?

• A. Control Assessments
• B. Assessment Reports
• C. Remediation Actions
• D. Assessor Selection

Answer: (A)

Evaluating security controls to determine if they function as intended is what a control assessment is about. The task that is described directly as Control Assessments focuses on performing those evaluations—planning, conducting tests, gathering evidence, and judging whether the controls meet the required effectiveness. It’s the active step of verifying that controls are properly implemented and operating as designed.

The other items relate to the outputs or follow-up actions: assessment reports summarize what was found, remediation actions address any deficiencies identified, and assessor selection concerns who will carry out the assessment. While all of these are part of the overall process, they do not define the act of performing the control evaluation itself.