easyMultiple ChoiceObjective-mapped
CRISC Practice Question: Is the BEST practice for determining the…
Which of the following is the BEST practice for determining the frequency of control monitoring activities?
⚠ Common exam trap
Candidates often choose Option C (regulatory minimums) because they confuse compliance-driven minimums with best practice, failing to recognize that risk-based monitoring is more adaptive and effective for real-world risk management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Align monitoring frequency with risk level and control effectiveness assessment
Control monitoring frequency should be driven by the assessed risk level and the effectiveness of existing controls. High-risk areas or controls with lower effectiveness require more frequent monitoring to ensure timely detection of failures, while low-risk or highly effective controls can be monitored less often, optimizing resource allocation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Standardize all controls to quarterly monitoring
Why it's wrong here
Uniform frequency may not align with varying risk levels.
- ✗
Monitor only after a control failure is detected
Why it's wrong here
Reactive monitoring does not prevent failures.
- ✗
Set frequency based solely on regulatory minimum requirements
Why it's wrong here
Regulatory minimums may not be sufficient for effective risk management.
- ✓
Align monitoring frequency with risk level and control effectiveness assessment
Why this is correct
Risk-based monitoring ensures resources are focused on higher risks.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.