Which of the following statements is true about the continuous monitoring process?

Question

Options

• AIt takes place in the middle of system security accreditation.
• BIt takes place before and after system security accreditation.
• CIt takes place before the initial system security accreditation.
• DIt takes place after the initial system security accreditation.

• A
  7% (3)
• B
  2% (1)
• C
  2% (1)
• D
  89% (41)

Explanation

Continuous monitoring is an ongoing process that begins after a system has received its initial security accreditation (Authorization to Operate). Its purpose is to track the security posture of the system over time, detect changes, and ensure that controls remain effective. It is not a pre-accreditation activity; accreditation must first be granted, and then continuous monitoring sustains the assurance of security on a post-accreditation, ongoing basis.

No community discussion yet for this question.