nerdexam
(ISC)2

CGRC · Question #389

The use of automation to support ongoing assessments facilitates all but one of the following. Response:

The correct answer is B. Verification. Automation in ongoing assessments facilitates increased volume, coverage, and frequency, but the critical human element of verification remains essential.

Assessment/Audit of Security and Privacy Controls

Question

The use of automation to support ongoing assessments facilitates all but one of the following. Response:

Options

  • AVolume
  • BVerification
  • CCoverage
  • DFrequency

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    87% (45)
  • C
    8% (4)
  • D
    2% (1)

Why each option

Automation in ongoing assessments facilitates increased volume, coverage, and frequency, but the critical human element of verification remains essential.

AVolume

Automation significantly increases the volume of security checks and assessments that can be performed across an IT environment, making it a key facilitator.

BVerificationCorrect

While automation provides data and results, the ultimate verification of those findings-that is, confirming their accuracy, validity, and contextual relevance, especially for complex compliance or security posture evaluations-often requires human judgment and expertise. Automation assists in collecting information for verification but does not inherently perform the qualitative act of verification itself.

CCoverage

Automated tools can scan a broader range of systems, configurations, and vulnerabilities, thus improving the coverage of assessments across an organization's assets.

DFrequency

Automation enables assessments to be run much more frequently, shifting from periodic manual checks to continuous or near-continuous monitoring, improving the timeliness of security insights.

Concept tested: Benefits of security automation

Source: https://csrc.nist.gov/glossary/term/continuous-monitoring

Topics

#Automated assessments#Assessment capabilities#Control verification#GRC automation

Community Discussion

No community discussion yet for this question.

Full CGRC Practice