The MAIN purpose of reviewing a control after implementation is to validate that the control:

The main purpose of reviewing a control after implementation is to validate that the control operates as intended, as this can help to ensure that the control is effective and efficient in mitigating the risk, and that it meets the control objectives and requirements. Reviewing a control after implementation can also help to identify and address any issues or gaps that may arise during the control operation, and to monitor and evaluate the performance and impact of the control. Reviewing a control after implementation can also provide feedback and information to the control owners and stakeholders, and enable them to adjust the control design and implementation accordingly. References = Most Asked CRISC Exam Questions andAnswers. CRISC: Certified in Risk & Information Systems Control Sample Questions, Question254. ISACA Certified in Risk and Information Systems Control (CRISC) Certification Exam Question and Answers, Question 254. CRISC by Isaca Actual Free Exam Q & As, Question 9.