With what frequency should monitoring of a control occur when implementing Information Security Continuous Monitoring (ISCM) solutions?

A. Continuously without exception for all security controls

B. Before and after each change of the control

C. At a rate concurrent with the volatility of the security control

D. Only during system implementation and decommissioning