# Control Advanced Effectiveness Testing

{% hint style="info" %}
**Video Tutorial**

Prefer to watch instead of read? Have a look at our [Video Tutorials](/best-practices-and-guides/video-tutorials.md#control-advanced-effectiveness-testing) Video Tutorials
{% endhint %}

Control Effectiveness Testing ensures that controls are functioning as intended to mitigate risks. This process involves multiple steps to validate design and operational effectiveness.

When you generate samples in this workflow, CERRIX uses the [Randomizer](/cerrix-functionalities/module-overview/controls/control-advanced-effectiveness-testing/randomizer.md) to determine which items are selected from the defined population.

This supports a consistent and auditable way to choose samples during control effectiveness testing.

<figure><img src="/files/ITfGk3rXXSRL1O2UpByz" alt=""><figcaption></figcaption></figure>

### Steps for Effectiveness Testing

#### Step 1: Source Document Uploader

1. Navigate to the test plan in the **Controls** module.
2. Click **Upload Source Document**.
3. Drag and drop files or browse to upload relevant documents.
4. Optionally, add a description for the uploaded file.

<figure><img src="/files/33mUiDv4Bys76accPTWQ" alt=""><figcaption></figcaption></figure>

#### Step 2: Generating Samples

* Choose a sampling method:
  * **By Number**: Generate samples based on a predefined count.
  * **By Date**: Use a date range to generate samples.
  * **By Spreadsheet**: Upload a spreadsheet and configure sample generation from unique IDs in the file.

In all three cases, CERRIX uses the same randomizer logic to select samples. Selected items are not picked twice within the same sample set. See [Randomizer](/cerrix-functionalities/module-overview/controls/control-advanced-effectiveness-testing/randomizer.md) for the technical details.

#### Step 3: Uploading Evidence

<figure><img src="/files/IXUndozglPqb8jBnTp3t" alt=""><figcaption></figcaption></figure>

* Upload evidence for each sample.
* Mark samples without evidence and provide a reason in the comments.

<figure><img src="/files/Sldk8Q0eq5n2WjXr17Ho" alt=""><figcaption></figcaption></figure>

#### Step 4: Testing

* Assess each sample and document findings.
* Provide scores and comments for each test step.

<figure><img src="/files/gFirkDztIFxQNu9F2cet" alt=""><figcaption></figcaption></figure>

#### Step 5: Reviewer Step

* The reviewer assesses the results, provides feedback, and confirms the final outcome.

> **Best Practice**: Ensure all required documents are uploaded before moving to the next step.

<figure><img src="/files/naPs4UZ1kysZMlu2iQ26" alt=""><figcaption></figcaption></figure>

### Control Description Snapshot

<figure><img src="/files/OjNOWm0coMIpv7H4R2dt" alt=""><figcaption></figcaption></figure>

When a test plan is closed, CERRIX automatically creates a snapshot of the control description as it was at that moment.

This snapshot ensures that the historical context of the control is preserved, even if the control description is updated later on. When you open a Control Advanced Effectiveness Test Plan after it has been closed, this snapshot is displayed instead of the current control description.

The date displayed next to the control description indicates when the snapshot was taken.

## Control Effectiveness Testing Roles, Rights and Permissions

You can find an overview of the different roles, rights and permission for controls in this handy overview:

[Roles, Rights and Permissions](/cerrix-functionalities/roles-rights-and-permissions.md#controls-permission-matrix)

{% hint style="info" %}
While we work on creating content for this documentation, more information can be found in the document below.
{% endhint %}

{% file src="/files/xyKYNQ9PHH281FKXCFc9" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cerrix.com/cerrix-functionalities/module-overview/controls/control-advanced-effectiveness-testing.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.