Which of the following is the PRIMARY consideration when determining the frequency an automated control should be assessed or monitored?

The complexity of the control may influence implementation effort and documentation requirements, but complexity alone does not directly determine how often the control needs to be assessed once it is operational.

The level of automation of a control describes how much human intervention is involved, but a highly automated control does not inherently require more or less frequent monitoring than a partially automated one based on that characteristic alone.

The range of values of an automated control determines how broadly the control must function and how many potential states or inputs it must handle correctly. A control with a wide range of values has more opportunities for misconfiguration or failure across different scenarios, making frequent monitoring essential to ensure it continues to operate accurately across all valid inputs and edge cases. This directly influences the monitoring frequency because greater variability in values means greater risk that the control may behave unexpectedly in untested conditions.

Volatility refers to how frequently the control itself changes, which is a relevant factor for change management but is not the primary driver for determining the routine assessment or monitoring frequency of an automated control.