Which of the following is a reason to monitor cryptographic controls continuously?

• A. To increase system complexity
• B. To reduce auditing requirements
• C. To avoid updates
• D. To ensure keys remain secret and detect compromises

Answer: (D)

Continuous monitoring of cryptographic controls focuses on keeping cryptographic keys protected and quickly spotting any signs of misuse or compromise. By watching how keys are generated, stored, accessed, and used, you can ensure they remain secret and that any unusual activity—such as unexpected export, unusual access from new locations, or anomalous decryptions—is detected promptly. This enables timely key rotation, revocation, and incident response, which are essential to maintaining confidentiality and trust in the cryptographic system. The other options describe outcomes that would undermine security or do not address protection of keys and detection of breaches, so they aren’t the goal of monitoring.