How do audits verify the effectiveness of control measures?

How do audits verify the effectiveness of control measures?

• A. They check procurement records and vendor performance.
• B. They interview staff without observing operations.
• C. They check implementation, functioning, and resulting risk reduction; identify gaps and recommend improvements.
• D. They focus solely on incident counts.

Answer: (B)