With what frequency should monitoring of a control occur when implementing Information Security Continuous Monitoring (ISCM) solutions?

With what frequency should monitoring of a control occur when implementing Information Security Continuous Monitoring (ISCM) solutions?
A . Continuously without exception for all security controls
B . Before and after each change of the control
C . At a rate concurrent with the volatility of the security control
D . Only during system implementation and decommissioning

View Answer

Answer: B