An assessor identifies automated methods for identifying security control compliance through validating sensors at the endpoint and at Tier 2. Which of the
following practices satisfy continuous monitoring of authorized information systems?

A.
Independent verification and validation

B.
Security test and evaluation

C.
Risk assessment

D.
Ongoing authorization