IIA-CIA-PART1 · Question #220
Which of the following is an example of risk monitoring to ensure a system is performing as intended?
The correct answer is A. Checking the progress of risk treatment plans. Option A is correct because risk monitoring involves tracking whether risk treatment plans are actually being carried out and whether they're working - it's an ongoing oversight activity that ensures the system behaves as intended after risks have been addressed. Why the…
Question
Which of the following is an example of risk monitoring to ensure a system is performing as intended?
Options
- AChecking the progress of risk treatment plans
- BConsidering the consequence and likelihood of risks
- CDocumenting the risks and their areas of impact
- DCommunicating to management about risks
How the community answered
(50 responses)- A74% (37)
- B6% (3)
- C16% (8)
- D4% (2)
Explanation
Option A is correct because risk monitoring involves tracking whether risk treatment plans are actually being carried out and whether they're working - it's an ongoing oversight activity that ensures the system behaves as intended after risks have been addressed.
Why the distractors are wrong:
- B (consequence and likelihood) describes risk assessment/analysis - evaluating risks before deciding how to treat them, not watching over them afterward.
- C (documenting risks and impact areas) describes risk identification/recording - an earlier step in the risk management process.
- D (communicating to management) describes risk communication - a separate process focused on reporting, not active surveillance of performance.
Memory tip: Think of monitoring as "watching the work in progress." If a treatment plan is a prescription, monitoring is checking that the patient is taking their medicine and getting better - it tracks action and outcome, not discovery or discussion.
Community Discussion
No community discussion yet for this question.