---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Determine control effectiveness of a control test

# Determine control effectiveness of a control test {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

Apply the objective effectiveness of the assessment procedures and the operating effectiveness of the control test to determine the control effectiveness of the control test. An assessment procedure is applied to check the
control test at a granular level.

## Before you begin

Role required: sn_irm_cont_auth.system_owner, sn_irm_cont_auth.info_system_sec_officer, sn_irm_cont_auth.authorization_official, sn_irm_cont_auth.info_system_sec_manager, sn_irm_cont_auth.admin

## Procedure

1. Navigate to AllContinuous Authorization \& MonitoringAll Engagements.
2. Select the engagement.
3. Select the Control tests tab and select a control test link in the Number column.
4. In the Control test form that opens, you can view the effectiveness of the control in the Control effectiveness field.
5. Select the Operational test tab to view the operating effectiveness of the control test.  
   Note:  
   The Examine, Interview, and Test fields are pre-populated from the NIST control objectives, and aren't editable at the control test level. If you must edit any of these descriptions, you can do so in the test plan form. See [Generate assessment procedure plans for a test plan](https://www.servicenow.com/docs/GLAJi1gdwexx7ZHcTb2L_w "Use the test plan that is automatically generated for a control, which is in an assess state, to view and determine if the control is assessed in accordance with the assessment procedure plan.").
6. Select the Assessment procedures related list to view the objective effectiveness of all the assessment procedures.  
   The number of assessment procedures generated is exactly equal to the number of assessment procedure plans that were generated from the test plan.  
   Figure 1. Control effectiveness of a control test


   The values of the operating effectiveness of a control test are:
   * None
   * Ineffective
   * Effective
   {#cam-control-effectiveness-control-test__ul_lyd_hfb_4zb}  
   The values of the objective effectiveness of an assessment objective are:
   * None: Indicates that the assessment procedure hasn't been analyzed or assessed yet.
   * Effective
   * Ineffective
   * Not Applicable: Indicates that the assessment procedure isn't valid or not required for this control test check.
   {#cam-control-effectiveness-control-test__ul_uz4_mfb_4zb}  
   The Control effectiveness of the control test is determined by:{#cam-control-effectiveness-control-test__table_mm1_qbt_4zb__entry__3}

   | Operating effectiveness | Objective effectiveness | Control effectiveness |
   |-|-|-|
   | Effective/Ineffective/None | Any one is Ineffective | Ineffective |
   | Effective | Not applicable/None/Effective | Effective |
   | Ineffective | Not applicable/None/Effective/Ineffective | Ineffective |
   | Ineffective | Ineffective | Ineffective |
   | None/Effective | Effective | Effective |
   | None | One is Effective and another Ineffective | Ineffective |
   | None | One is None and another is Not applicable | None |
   [ ]

   {#cam-control-effectiveness-control-test__table_mm1_qbt_4zb}

   As long as the control test is in the Open or Work in Progress state, it does not matter if the objective effectiveness of the Assessment procedures is None. However, you cannot move the control test
   to the Review state until you mark every assessment objective as either Effective, Ineffective, or Not Applicable. An error message pops up to indicate that you must check the assessment objective and move it out of
   the None state, so as to move the control test to the Review or Closed Complete state.
7. Select the link in the Identifier column of the Assessment procedures related list to view the Assessment procedure form.  
   All fields in the form are read only except the Objective effectiveness field, which you can edit if the control test is either in Open or Work in Progress state. The Objective effectiveness field is read only in the Review state, or in any closed states such as Closed Complete, Closed Incomplete, and Closed Skipped.
8. If you update the objective effectiveness value of the assessment procedure, select Update to save your changes.

*[\>]: and then