premise: Directly testing control effectiveness was cited most often as an effective way to determine if the risk reduction techniques that had been agreed to were, in fact, operating effectively.
hypothesis: As an effective way to determine, if the risk reduction techiques that had been agreed to, were operating effectively is directly testing control effectiveness.