Term Kind Topic What it is
Continuous Controls Monitoring CCM practice Continuous Controls Monitoring Automatically testing control effectiveness continuously across the whole population, rather than through periodic manual sampling.
Control Coverage Assurance Coverage, Estate Coverage concept Continuous Controls Monitoring The proportion of the actual estate a control operates on - the metric that determines whether monitoring provides assurance or false confidence.
Control Test Automation practice Continuous Controls Monitoring Executing a control's test continuously against the whole population rather than sampling it annually, which changes both the detection latency and the strength of the evidence.
Coverage Drift Shrinking Scope, Control Reach Decay concept Continuous Controls Monitoring A control operating perfectly on a diminishing share of the estate - passing every assessment of the systems it covers while providing progressively less assurance overall.
Sampling Risk Detection Probability, Audit Sampling Power metric Continuous Controls Monitoring The probability that a sample-based control test misses a violation that exists in the population - which for small samples and rare violations is most of the time.