Which of the following statements is true?

An entity wants to use the Customized Approach. They are unsure how to complete the Controls Matrix or TRA. During the assessment, you spend time completing the Controls Matrix and the TRA. while also ensuing that the customized control is implemented securely.

Which of the following statements is true?

A. You can assess the customized control but another assessor must verify that you completed the TRA correctly.

B. You can assess the customized control and verify that the customized approach was correctly followed but you must document this in the ROC.

C. You must document the work on the customized control in the ROC but you can not assess the control or the documentation.

D. Assessors are not allowed to assist an entity with the completion of the Controls Matrix or the TR

Answer: B