Watch this video on YouTube
In the continuous monitoring step of the NIST RMF, which of the following activities should be performed periodically to assess the effectiveness of security controls?