ISC2 Governance, Risk and Compliance (CGRC) Practice Question

An automated configuration management database (CMDB) that reconciles near-real-time RFID inventory scans with the list of authorized assets demonstrates true continuous monitoring of physical assets. Continuous polling by fixed RFID readers supplies objective, up-to-date data on each device's presence, while the CMDB linkage ties every detected item to an approved change record. Together, these elements satisfy controls that require current hardware inventories and alignment with the change-management process.

Fire-suppression inspection certificates relate to safety systems, not asset tracking. Visitor sign-in sheets document personnel access rather than hardware status. An annual physical count occurs too infrequently to qualify as continuous monitoring and lacks automatic correlation with change records.