Exam CRISC topic 1 question 691 discussion

The answer should be C.

The BEST method for assessing control effectiveness among the options provided is C. Continuous monitoring. Continuous monitoring involves the ongoing and automated assessment of controls and their effectiveness. It allows for real-time or near-real-time monitoring of systems, processes, and security controls to identify and respond to issues as they occur. This proactive and dynamic approach is generally more effective than ad hoc reporting, predictive analytics, or control self-assessment, as it provides a continuous feedback loop to help organizations detect and address control weaknesses and risks in a timely manner.

Agree it is C.

Agree.

B: seems correct if I go by this analysis How do you measure effectiveness of control? 4 Steps to Measure Controls' Effectiveness with Cyber Risk Quantification Identify current risk exposure. Map the control being considered to the FAIR Model. Perform a future state analysis, evaluating the effectiveness of the control. Compare the current state vs. future state to perform a cost-benefit analysis.

echo C

Should be C

Also see R3-76

I agree it is C. See R2-26

Check CRISC MANUAL 6TH EDITIION ,PAGE 173 FOR THE DEFINITION OF CONTROL-RISK SELF-ASSESSMENT.

It should be continuous monitoring