Risk Monitoring

Definitions

1. The ongoing tracking of risk conditions, control effectiveness, threat changes, and remediation progress over time. Risk monitoring matters because a decision that was acceptable once may become unsafe as exposures, business dependence, or attacker activity change.

   In plain English: Continuously watching whether a risk or its protections are changing over time.

   Example: "The exception stayed open only because risk monitoring required monthly proof that compensating controls were still working."

Related Terms

• Risk Acceptance
• Risk Appetite
• Risk Category
• Risk Communication
• Risk Framework
• Risk Management
• Risk Statement
• Risk Strategy
• Risk Threshold