Certified in the Governance of Enterprise IT (CGEIT) — Question 334

Senior leadership is concerned about a recent trend of excessive exceptions to existing controls. Which of the following should be implemented to address this concern?

Answer options

Correct answer: A

Explanation

Continuous monitoring is essential as it allows for real-time oversight of control effectiveness and helps identify excessive exceptions swiftly. Independent audits, a control library, and risk awareness training are valuable, but they do not provide the proactive, ongoing oversight needed to address the immediate concern of excessive exceptions.