Review and evaluate control effectiveness

---
title: Review and evaluate control effectiveness
description: Review and evaluate the effectiveness of the controls through the execution of control tests related to NIST-800.53.r4.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/rmf-evaluate-control-effectiveness.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Assess controls, risks, issues, and remediation tasks, Process overview, NIST RMF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Review and evaluate control effectiveness

Review and evaluate the effectiveness of the controls through the execution of control tests related to NIST-800.53.r4.

## Before you begin

**Note:** Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md).

Role required: sn\_irm\_nist\_rmf.security\_accessor, sn\_irm\_nist\_rmf.risk\_executive, or sn\_irm\_nist\_rmf.security\_officer

## Procedure

1.  Navigate to **All** > **NIST RMF** > **Assess** > **Control Effectiveness**.

2.  Review each control test and their related security controls.

3.  Review the control effectiveness results in the system.

4.  Perform the control tests assigned to you following the standard approach outlined in the Audit Management application.


**Parent Topic:**[Assess controls, risks, issues, and remediation tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-assess.md)