(ISC)2 Certified in Cybersecurity Practice Exam

What is a critical component of ongoing risk management in organizations?

1. Continuous Monitoring

2. Incident Response

3. Compliance Auditing

4. System Hardening

The correct answer is: Continuous Monitoring

Continuous monitoring is a critical component of ongoing risk management in organizations because it involves the regular observation and analysis of an organization's security posture and risk levels. This practice allows for the early detection of potential threats, vulnerabilities, and compliance issues, enabling organizations to respond proactively rather than reactively. By implementing continuous monitoring, organizations can track changes in their environment, assess the effectiveness of security controls, and adjust their risk management strategies as needed. This ongoing vigilance supports the timely identification of emerging risks and ensures the organization remains resilient against evolving cyber threats. Other choices represent important security functions as well, but they do not encompass the ongoing and dynamic nature of risk management in the same way as continuous monitoring. Incident response is crucial for reacting to security incidents once they occur, while compliance auditing focuses on ensuring adherence to regulations and standards at specific intervals. System hardening involves taking steps to secure systems proactively, but it is a part of risk management rather than a continuous process. Continuous monitoring integrates these elements into a cohesive strategy that allows organizations to maintain an up-to-date understanding of their risk landscape.