Which of the following would be considered a monitoring activity in organization wide risk management?

Which of the following would be considered a monitoring activity in organization wide risk management?
A . Validate the results of management’s self-assessment.
B. Perform reviews of personnel.
C. Maintain rigorous and comprehensive documentation.
D. Obtain authorizations and signatures.

Answer: A