The GREATEST benefit of introducing continuous monitoring to an IT control environment is that it:

The correct answer is C because continuous monitoring is intended to detect changes in the risk and control environment quickly enough for management to respond. The uploaded CRISC notes state that “the most significant benefit of implementing a continuous risk management process” is that it captures changes to the enterprise risk profile, and that a main purpose of continuous monitoring is detecting changes to the enterprise’s risk environment.

A, B, and D may be secondary benefits, but they are not the greatest benefit. Benchmarking, investment support, and stakeholder identification do not provide the same direct risk-management value as timely detection of emerging risk.

===========