The primary consideration when determining the frequency an automated control should be assessed or monitored is the volatility of the automated control. An automated control is a control that is performed by a system or a device without human intervention, such as a firewall, an antivirus, or a backup. An automated control can provide various benefits, such as reducing errors, increasing efficiency, or enhancing security.
However, an automated control also needs to be assessed or monitored regularly to ensure that it is functioning properly, effectively, and securely, and that it is aligned with the objectives and requirements of the organization. The frequency of the assessment or monitoring of an automated control depends on various factors, such as the type, purpose, or complexity of the control, the level of automation or integration of the control, or the range of values or parameters of the control. However, the primary consideration is the volatility of the automated control, which is the degree or rate of change or variation of the control over time, due to internal or external factors, such as updates, modifications, or threats. The higher the volatility of the automated control, the more frequent the assessment or monitoring of the control should be, as it can increase the risk of errors, failures, or breaches of the control, and affect the performance or security of the control. The complexity, the level of automation, or the range of values of the automated control are not the primary considerations when determining the frequency of the assessment or monitoring of the control, as they are either not directly related to the change or variation of the control, or they are secondary or tertiary factors that depend on or influence the volatility of the control. References:
* Automated Control
* Assessment and Monitoring of Automated Control
* Volatility of Automated Control