Governance of Enterprise IT (CGEIT) Certification Practice Exam

In the context of IT services, what does continuous monitoring aim to achieve?

1. Audit compliance only

2. Detect unauthorized changes

3. Measure employee productivity

4. Manage project timelines

The correct answer is: Detect unauthorized changes

Continuous monitoring in the context of IT services is primarily aimed at detecting unauthorized changes. This practice involves systematically observing and evaluating IT systems, networks, and applications to identify any alterations that are not approved or expected. By maintaining constant oversight, organizations can quickly spot anomalies that may indicate security breaches, configuration changes, or potential compliance violations. This proactive approach is essential for safeguarding the integrity and availability of IT services, thereby helping organizations respond swiftly to security threats and ensuring that their IT environment remains secure and compliant with established policies. The focus on unauthorized change detection aligns with the overall goal of risk management in IT governance, where knowing what changes occur in the environment allows organizations to mitigate risks effectively. Continuous monitoring serves as an essential tool for organizations to ensure that only authorized changes are implemented, thus maintaining control over their IT assets.