Which term describes the continuous evaluation of security controls within an organization?

• A. Authorization
• B. Assessment
• C. Monitoring
• D. Implementation

Answer: (C)

The term that accurately describes the continuous evaluation of security controls within an organization is monitoring. Monitoring involves consistently reviewing and analyzing the effectiveness of security measures in place, enabling organizations to identify potential vulnerabilities and determine whether those controls are operating as intended. This ongoing process is crucial for adapting to new threats and ensuring compliance with security policies and regulations.

In contrast, authorization refers to the process of granting or denying access to resources based on user privileges. Assessment typically focuses on evaluating the security posture at a specific point in time, rather than fostering continuous oversight. Implementation involves putting security measures into practice, but does not encompass the continuous evaluation aspect inherent in monitoring. Thus, monitoring is the vital practice that helps organizations maintain a proactive stance on security management.