nerdexam
(ISC)2

SSCP · Question #1182

Risk assessment deals with constant monitoring?

The correct answer is B. False. While risk management involves ongoing monitoring, risk assessment is a periodic process of identifying and analyzing risks, distinct from the continuous nature of monitoring.

Submitted by chiamaka_o· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Risk assessment deals with constant monitoring?

Options

  • ATrue
  • BFalse

How the community answered

(25 responses)
  • A
    12% (3)
  • B
    88% (22)

Why each option

While risk management involves ongoing monitoring, risk *assessment* is a periodic process of identifying and analyzing risks, distinct from the continuous nature of monitoring.

ATrue

Risk assessment is a snapshot in time or a periodic evaluation, not a continuous activity; constant monitoring is a separate, ongoing phase of risk management.

BFalseCorrect

Risk assessment is a distinct process of identifying, analyzing, and evaluating risks, typically performed periodically or when significant changes occur, whereas constant monitoring is part of ongoing risk *management* or *risk treatment*, which follows the assessment phase.

Concept tested: Risk assessment vs. risk monitoring

Source: https://learn.microsoft.com/en-us/azure/compliance/security-risk-assessment

Topics

#Risk assessment#Risk monitoring#Risk management process

Community Discussion

No community discussion yet for this question.

Full SSCP Practice