premise: Directly testing control effectiveness was cited most often as an effective way to determine if the risk reduction techniques that had been agreed to were, in fact, operating effectively.
hypothesis: Remotely testing control effectiveness was cited most often as an effective way, to determine if the risk reduction techniques that had been agreed to, were in fact, operating effectively.