Which outcome involves ongoing assessments of control effectiveness in line with the continuous monitoring strategy?

• A. The information system and environment are monitored per the continuous monitoring strategy.
• B. Ongoing assessments of control effectiveness are conducted in accordance with the continuous monitoring strategy.
• C. Remediation actions are taken.
• D. Authorization decisions are reported.

Answer: (B)

Continuous monitoring centers on regularly checking how well controls function over time. The outcome that best fits is conducting ongoing assessments of control effectiveness in accordance with the continuous monitoring strategy. This ensures that control performance is continually evaluated using evidence from operations and testing, helping detect drift or weaknesses early. Other items describe related activities—monitoring the system and environment, taking remediation actions, or reporting authorization decisions—but they do not specify the ongoing evaluation of how effectively controls are operating.