Why is ongoing monitoring important for risk controls?

• A. To verify effectiveness, detect changes, and trigger timely corrective actions and improvements.
• B. To schedule routine audits only.
• C. To reduce costs regardless of outcomes.
• D. To replace risk assessments.

Answer: (A)

Ongoing monitoring ensures risk controls stay effective over time by verifying performance, detecting changes in the operating environment, and enabling timely corrective actions and improvements. As processes, people, or external conditions evolve, a control that once worked can drift or fail; continuous monitoring uses metrics, testing, sampling, and automated alerts to track how well the control is actually functioning. When monitoring revealsunderperformance or shifting risk, responses can be swift—adjusting the control, redesigning processes, or updating the risk assessment—so risk remains managed and gains or losses are prevented. This creates a feedback loop that keeps the control framework aligned with current realities rather than relying on a one-off evaluation.

Audits are periodic and may miss day-to-day drift; simply aiming to cut costs ignores whether controls are effectively reducing risk, and risk assessments serve as a snapshot that needs updating as conditions change.