Directly testing control effectiveness was cited most often as an effective way to determine if the risk reduction techniques that had been agreed to were, in fact, operating effectively.
As an effective way to determine, if the risk reduction techiques that had been agreed to, were operating effectively is directly testing control effectiveness.