Exam CRISC topic 1 question 820 discussion

C. facilitate the comparison of the current and desired states. The primary purpose of IT control status reporting is to provide a means for comparing the current state of IT controls within an organization with the desired state or expected level of control effectiveness. This helps in assessing whether controls are operating as intended, identifying gaps or deficiencies, and taking appropriate actions to bring the control environment in alignment with the organization's goals, compliance requirements, and risk management objectives. It serves as a tool for monitoring and improving the overall control posture of the organization. While the other options may be secondary purposes, the primary focus is on assessing and improving the control environment.

Agree it is C.

C. facilitate the comparison of the current and desired states. The primary purpose of IT control status reporting is to provide visibility into the current state of IT controls and compare it to the desired state. This comparison helps identify gaps, areas for improvement, and the progress made towards achieving the organization's objectives. It enables management to make informed decisions about allocating resources and prioritizing efforts to strengthen the overall control environment.