A continuous monitoring strategy for a new system is developed during which phase of the system development life cycle? Response:

During the Development/Acquisition phase, security controls are implemented and tested. It is also the appropriate time to design and integrate the continuous monitoring strategy, ensuring that monitoring capabilities are built into the system from the ground up, rather than being an afterthought.

Operations/Maintenance is where continuous monitoring is executed, not where the strategy is typically developed for a new system.

The Initiation phase focuses on preliminary system needs and feasibility, not detailed security strategy development for continuous monitoring.

Concept/requirements definition outlines high-level needs; the detailed strategy for continuous monitoring is typically developed later during system design and implementation.