In the Risk Management Framework, which step is responsible for maintaining ongoing situational awareness about security and privacy posture?

In the Risk Management Framework, which step is responsible for maintaining ongoing situational awareness about security and privacy posture?

• A. Monitor
• B. Assess
• C. Authorize
• D. Respond

Answer: (A)

Maintaining ongoing situational awareness about security and privacy posture comes from continuous monitoring. This step is all about keeping the visible picture up to date, collecting and analyzing ongoing telemetry on how well security and privacy controls are working, and noting any changes in the environment that could affect risk. It involves tracking control effectiveness, new threats and vulnerabilities, changes in system configuration, and compliance status, then using that information to adjust risk management actions and, when needed, update authorization decisions. The other stages focus on different phases: assessing evaluates the controls to determine their initial effectiveness; authorizing is the formal decision to operate based on those assessments; responding handles actions taken in response to detected incidents. Continuous monitoring ties these pieces together by providing the live, evolving picture that keeps the organization aware of its security and privacy posture over time.

Maintaining ongoing situational awareness about security and privacy posture comes from continuous monitoring. This step is all about keeping the visible picture up to date, collecting and analyzing ongoing telemetry on how well security and privacy controls are working, and noting any changes in the environment that could affect risk. It involves tracking control effectiveness, new threats and vulnerabilities, changes in system configuration, and compliance status, then using that information to adjust risk management actions and, when needed, update authorization decisions.

The other stages focus on different phases: assessing evaluates the controls to determine their initial effectiveness; authorizing is the formal decision to operate based on those assessments; responding handles actions taken in response to detected incidents. Continuous monitoring ties these pieces together by providing the live, evolving picture that keeps the organization aware of its security and privacy posture over time.