Which outcome focuses on monitoring the information system and environment of operation in accordance with the continuous monitoring strategy?

• A. The information system and environment of operation are monitored in accordance with the continuous monitoring strategy.
• B. Ongoing assessments of control effectiveness are conducted.
• C. Remediation actions are taken.
• D. Authorization decisions are reported.

Answer: (A)

Continuous monitoring is about ongoing visibility into the information system and its environment so changes can be detected and addressed promptly. The option that states the system and environment are monitored in accordance with the continuous monitoring strategy directly captures this ongoing surveillance aligned to the defined plan, making it the best fit. It embodies the actual monitoring activity described by the strategy, rather than actions that support monitoring (like evaluating control effectiveness), responses to issues (remediation), or formal authorization outcomes. The other activities—assessing control effectiveness, taking remediation actions, and reporting authorization decisions—are important parts of the broader process, but they do not specify the ongoing monitoring itself in accordance with the strategy.