A city's risk register is refreshed only during the annual budget cycle even though systems and threats change monthly. What improvement best aligns with sound risk management?
Select an answer to reveal the explanation.
Short Explanation
Risk isn't a once-a-year Christmas ornament. Systems and attackers move; the register has to keep up with monitoring and real metrics. Annual budget theater alone leaves eleven months of blind spots.
Full Explanation
Continuous monitoring and measurement support timely risk decisions as assets, threats, and controls evolve. An annual-only register update is too coarse for operational risk management and weakens reporting to leadership. Effectiveness metrics and interim reviews keep treatment decisions grounded in current conditions.