A continuous monitoring indicator for backup success fails mid-quarter for the water utility SCADA support entity. What should happen next in a well-designed IRM setup?
Select an answer to reveal the explanation.
Short Explanation
If the smoke alarm goes off in July, you don’t wait for the December inspection form. Continuous monitoring should open an issue when a signal fails so someone fixes the backup gap now. That’s the whole point of not relying only on quarterly attestations.
Full Explanation
Continuous monitoring is valuable because failures can generate issues for remediation as soon as thresholds are breached, rather than deferring detection to the next attestation cycle. Automated or promptly queued issue creation keeps the common issue process in play between formal attestation windows. Waiting for quarter-end, closing controls without issues, or diverting solely to security incidents misses that IRM monitoring-to-issue pattern.