With what frequency should monitoring of a control occur when implementing Information

Security Continuous Monitoring (ISCM) solutions?

A. Continuously without exception for all security controls

B. Before and after each change of the control

C. At a rate concurrent with the volatility of the security control

D. Only during system implement

ation and decommissioning