A health department can auto-check encryption settings daily but still needs annual human review of exception handling. Which architecture fits?
Select an answer to reveal the explanation.
Short Explanation
Sensors watch the fridge temperature all day; once a year a dietitian still checks the menu. Indicators handle the measurable stuff continuously, while periodic human tests cover judgment calls. Use both—do not force one to replace the other.
Full Explanation
Hybrid compliance architecture supplements periodic control tests with continuous monitoring indicators for measurable conditions. Automation improves freshness for technical checks, but human periodic tests remain appropriate for judgment-heavy procedures. Mature IRM designs place indicators alongside—not as a total replacement for—human testing where needed.