In step 5 of the RM process, ensuring changes requiring further RM are identified is part of which action?

• A. Action 2- assess
• B. Action 4- review
• C. Action 1- monitor
• D. Action 3- implement

Answer: (C)

Monitoring is the ongoing activity that watches how implemented controls perform and whether anything in the environment has changed. In step five, this monitoring is used to identify any changes that would require further risk management actions. When monitoring reveals new risks, inadequate control performance, or shifts in risk levels, it signals the need to revisit risk assessment and potentially implement additional measures. The other actions correspond to assessing risk, implementing controls, or reviewing the process, but none are primarily about catching new RM needs as a continuous activity.