What describes the relationship between configuration management controls and continuous monitoring?

The correct choice highlights the importance of integration between configuration management controls and continuous monitoring. This integration is crucial because it ensures that any changes made to system configurations do not unintentionally compromise the security of the system. Continuous monitoring works in tandem with configuration management by actively assessing and verifying the security posture of the system as configurations are adjusted. This relationship allows for real-time assessment of potential vulnerabilities that might arise from changes, ensuring that security measures remain robust throughout the lifecycle of the system.

The other choices do not adequately capture the essence of this relationship. A flexible approach to system configurations may indeed provide adaptability, but without robust oversight through continuous monitoring, such flexibility could lead to security gaps. Keeping configuration processes separate from monitoring activities undermines the proactive approach necessary for identifying and mitigating risks. Lastly, minimizing updates to configuration management policies does not reflect best practices, as regular updates are essential to adapt to new threats and changes in the operational environment. Therefore, the integration that ensures security is not compromised during adjustments is a core principle in maintaining an effective security posture.