Control Objectives are not active until the parent policy is in which state?

Control Objectives are not active until the parent policy is in which state?

• A. Awaiting Approval
• B. Draft
• C. Published
• D. Review

Answer: (C)

Control objectives activate only when the parent policy is Published. Policies typically move through stages like Draft, Awaiting Approval, Published, and sometimes Review after updates. While a policy is in Draft or Awaiting Approval, it’s not in effect, so the control objectives attached to it aren’t active, and they don’t influence risk assessments or control testing. Publishing marks the policy as approved and current, enabling the associated control objectives to become active and guiding enforcement, evidence collection, and assurance activities. After publishing, any changes may trigger a new review or re-publish, but activation hinges on that Published state.

Control objectives activate only when the parent policy is Published. Policies typically move through stages like Draft, Awaiting Approval, Published, and sometimes Review after updates. While a policy is in Draft or Awaiting Approval, it’s not in effect, so the control objectives attached to it aren’t active, and they don’t influence risk assessments or control testing. Publishing marks the policy as approved and current, enabling the associated control objectives to become active and guiding enforcement, evidence collection, and assurance activities. After publishing, any changes may trigger a new review or re-publish, but activation hinges on that Published state.