1.Walk me through how you'd test whether a control is working.
Why they ask
Testing is the backbone of the role, and this shows whether you understand design versus operating effectiveness.
How to answer
- Start with the rule or risk the control is meant to address
- Check the design first: would this control catch the problem if people followed it
- Pick a sample of real transactions or records and test each against the procedure
- Document every exception with evidence, not just a count
- Write the finding with a root cause and a practical fix, then agree a remediation owner

