A county compliance program already runs automated encryption indicators and still needs owners to confirm process controls that cannot be fully instrumented. Which assurance design fits?
Select an answer to reveal the explanation.
Short Explanation
Some doors get electronic sensors; some still need a human to confirm the lock turned. Hybrid assurance keeps continuous indicators for what machines can measure and periodic attestations for process judgment. Dropping either side leaves blind spots.
Full Explanation
Mature IRM designs often pair continuous monitoring indicators with periodic attestations so automated telemetry and human process confirmation both contribute to assurance. Indicators do not obsolete attestations for controls that require owner judgment, and annual handbook acknowledgments or yearly ITSM tickets are not a substitute hybrid model. Combining both mechanisms is the intended continuous-monitoring-plus-common-elements pattern.