anchor: Directly testing control effectiveness was cited most often as an effective way to determine if the risk reduction techniques that had been agreed to were, in fact, operating effectively.
positive: As an effective way to determine, if the risk reduction techiques that had been agreed to, were operating effectively is directly testing control effectiveness.
negative: Remotely testing control effectiveness was cited most often as an effective way, to determine if the risk reduction techniques that had been agreed to, were in fact, operating effectively.