RA Step 4 Task 1 Monitor Risk Factors covers which areas?

• A. Organization operations and assets, individuals, other organizations, and the nation.
• B. Only IT systems.
• C. Only customer data.
• D. Only physical security.

Answer: (A)

Monitoring risk factors involves looking at risk across four broad domains, not just technology. It covers how the organization operates and what assets are essential, the people who use and manage the systems, relationships with other organizations that rely on or interact with the systems, and potential national-level impacts. This holistic view reflects federal risk management practice, which treats risk as interconnected across operational, human, inter-organizational, and national dimensions rather than being limited to IT alone. That’s why the option listing all four areas is the best fit. Focusing only on IT systems, only customer data, or only physical security misses important parts of the risk landscape.