control effectiveness

A measure of whether a given control is contributing to the reduction of information security or privacy risk.