The best way to improve the visibility of end-user computing (EUC) applications that support regulatory reporting is to maintain an EUC inventory, as this provides a comprehensive and up-to-date list of all EUC applications, their owners, their locations, their purposes, and their dependencies. An EUC inventory can help identify and manage the risks associated with EUC applications, such as data quality, security, compliance, and continuity. EUC availability controls, EUC access control matrix, and EUC tests of operational effectiveness are important forensuring the reliability and security of EUC applications, but they do not improve the visibility of EUC applications as much as an EUC inventory. References: CISA Review Manual (DigitalVersion), Chapter 3: Information Systems Acquisition, Development and Implementation, Section
3.4: End-user Computing