Quarterly control testing is due for an active ERP access control. What Policy and Compliance lifecycle activity should the owner perform?
Select an answer to reveal the explanation.
Short Explanation
When the calendar says quarterly test, actually run the test and park the result on the control. That’s the compliance heartbeat—evidence, not vibes. Retiring the mandate or deleting scope just to dodge the queue is the opposite of a lifecycle.
Full Explanation
The compliance lifecycle includes performing control tests and recording results against the control. Those results feed effectiveness reporting and may trigger issues on failure. Avoiding tests by retiring authorities, converting to unrelated incidents, or removing scope breaks the intended Policy and Compliance evidence chain.