Isaca
CISM · Question #665
When is the BEST time to verify that a production system's security mechanisms meet control objectives?
The correct answer is A. On a continuous basis through monitoring activities and automated tooling. Continuous monitoring provides real-time assurance that a system’s security mechanisms are functioning as intended and meeting control objectives, allowing for prompt detection and response to deviations.
Submitted by eva_at· Apr 18, 2026Information Security Program Development and Management
Question
When is the BEST time to verify that a production system’s security mechanisms meet control objectives?
Options
- AOn a continuous basis through monitoring activities and automated tooling
- BAfter remediations recommended by penetration tests have been completed
- CDuring quality and acceptance checks
- DDuring annual internal and compliance audits
How the community answered
(42 responses)- A93% (39)
- B5% (2)
- D2% (1)
Explanation
Continuous monitoring provides real-time assurance that a system’s security mechanisms are functioning as intended and meeting control objectives, allowing for prompt detection and response to deviations.
Topics
#Continuous Monitoring#Control Effectiveness#Security Assurance#Automated Security
Community Discussion
No community discussion yet for this question.