The ISACA AAIA™ framework distinguishes between " Verification " and " Validation " . " Verification " is a QA process that checks if the system was " built right " —i.e., whether the code, parameters, and architecture match the design documentation. " Validation " (Option A) checks if the " right system " was built—i.e., whether the model actually performs correctly on unseen data and meets business goals. While testing (Option C) identifies the performance gap, the specific act of auditing the model ' s configuration against its technical blueprints is a verification activity.