CRISC · Question #490
A robotic process automation (RPA) project has implemented new robots to enhance the efficiency of a sales business process. Which of the following provides the BEST evidence that the new controls…
The correct answer is B. A qualified independent party assessed the new controls as effective. The most reliable evidence of successful control implementation for RPA is an assessment by a qualified independent party, which provides an unbiased and expert validation of control effectiveness.
Question
A robotic process automation (RPA) project has implemented new robots to enhance the efficiency of a sales business process. Which of the following provides the BEST evidence that the new controls have been implemented successfully?
Options
- AA post-implementation review has been conducted by key personnel.
- BA qualified independent party assessed the new controls as effective.
- CSenior management has signed off on the design of the controls.
- DRobots have operated without human interference on a daily basis.
How the community answered
(46 responses)- A4% (2)
- B83% (38)
- C2% (1)
- D11% (5)
Why each option
The most reliable evidence of successful control implementation for RPA is an assessment by a qualified independent party, which provides an unbiased and expert validation of control effectiveness.
A post-implementation review by key personnel might be biased or lack the necessary expertise and independence to thoroughly assess control effectiveness.
An assessment by a qualified independent party provides the most objective and credible evidence of control effectiveness because it offers an unbiased evaluation, free from internal biases or pressures. This external validation ensures that the controls are not only implemented but are also operating as intended and achieving their security or efficiency objectives without conflict of interest.
Senior management signing off on the design of controls confirms approval of the plan, not the successful implementation and operational effectiveness of the controls themselves.
Robots operating without human interference indicates operational stability but does not inherently prove the effectiveness of security or operational controls implemented to manage risks associated with the RPA.
Concept tested: Control effectiveness validation
Source: https://learn.microsoft.com/en-us/compliance/regulatory/auditor-guidance-risk-management#conduct-internal-and-external-audits
Topics
Community Discussion
No community discussion yet for this question.