ISACA IT Risk Fundamentals Practice Test

Control objectives describe the intended result of applying controls to a process—the purpose or outcome the control procedures are meant to achieve. They set the target for what the controls are designed to ensure, such as preventing errors, ensuring compliance, or safeguarding assets. By defining this desired outcome, you know what success looks like and can design and test controls accordingly. This is different from governance, which is the broad framework for directing and controlling an organization; a RACI chart, which maps who is responsible, accountable, consulted, and informed; and a vulnerability, which is a weakness that could be exploited. For example, in a purchasing process the control objective might be to ensure all purchases are properly authorized and supported, guiding controls like required manager approval and documentation matching.