Technical controls implement the agreed risk treatment measures
This technical control verifies that each agreed risk measure is genuinely configured and working in the live environment, confirming compliance A.5.36 checks for rather than assuming it.
Verifying that each agreed technical risk measure is genuinely configured in the live environment closes the loop between a vulnerability decision and its implementation.
Verifying that each agreed technical risk measure is genuinely configured in the live environment is exactly the drift check A.8.9 requires.