What is the primary purpose of continuous risk monitoring in CRISC?
-
A
To detect changes in the risk environment and verify that controls remain effective over time
-
B
To replace periodic risk assessments entirely
-
C
To document incidents for regulatory reporting purposes only
-
D
To monitor employee compliance with acceptable use policies