How do you determine if a technical control is operating effectively versus just being designed correctly?
