Certified in Risk and Information Systems Control (CRISC) — Question 1119

Which of the following is the MOST effective way to identify changes in the performance of the control environment?

Answer options

• A. Evaluate key performance indicators (KPIs).
• B. Perform a control self-assessment (CSA).
• C. Implement continuous monitoring.
• D. Adjust key risk indicators (KRIs).

Correct answer: C

Explanation

Implementing continuous monitoring allows for real-time observation of the control environment, making it the most effective method for identifying performance changes. Evaluating KPIs and performing a CSA are useful but do not provide the immediacy of continuous monitoring. Adjusting KRIs is more reactive rather than proactive in identifying performance changes.