Continuous Monitoring is the fourth phase of the security certification and accreditation process. What activities are performed in the Continuous Monitoring process? Each correct answer represents a

Question

Options

• AStatus reporting and documentation
• BSecurity control monitoring and impact analyses of changes to the information system
• CConfiguration management and control
• DSecurity accreditation documentation E. Security accreditation decision

• A
  94% (48)
• D
  6% (3)

Explanation

Continuous Monitoring is an ongoing operational activity - its purpose is to maintain situational awareness of the system's security posture after accreditation is granted. Options A, B, and C all describe recurring, day-to-day activities: tracking security control effectiveness (B), managing changes to the system baseline (C), and documenting/reporting current security status to decision-makers (A). These activities never stop; they form a feedback loop that keeps leadership informed of the system's risk level over time.

Why D and E are wrong: Security accreditation documentation and the accreditation decision belong to Phase 3 (Security Accreditation), not Phase 4. They are one-time milestone events that authorize system operation - once that decision is made, the process moves into Continuous Monitoring, which takes over from there.

Memory tip: Think of Continuous Monitoring as the "keep the lights on" phase - you're Monitoring (B), Managing changes (C), and Reporting status (A). The accreditation decision (D & E) already happened to get you to Phase 4, so they can't also be Phase 4.

No community discussion yet for this question.