A lead asks what a control objective means versus a control in IRM. Which statement is accurate?
Select an answer to reveal the explanation.
Short Explanation
The objective is the reusable goal—like keep privileged access reviewed. The control is that goal planted on a specific entity with owners and tests.
Full Explanation
Control objectives define reusable outcomes or requirements in the content library. Controls are the instances created when those objectives are scoped to entities, carrying ownership and testing. That definition-versus-instance pattern mirrors other IRM pairs (for example risk statement versus risk) and is core terminology for CIS-RC.