Which role can move the control to the 'Monitor' state manually?

Which role can move the control to the 'Monitor' state manually?

• A. System Administrator
• B. Compliance Manager
• C. Risk User
• D. Audit User

Answer: (A)

Access to change a control’s lifecycle state is governed by who has system-wide permissions. The action of moving a control into the Monitor state manually is a privileged operation, and only someone with full administrative rights can perform such state transitions. The System Administrator role grants complete access to modify records and override workflow restrictions, so it can set the control to Monitor directly when needed. Other roles, like Compliance Manager, Risk User, or Audit User, have more limited scopes focused on policy oversight, risk handling, or evidence collection. They don’t typically include the ability to manually change the control’s lifecycle state, which is why they wouldn’t be able to move it to Monitor.

Access to change a control’s lifecycle state is governed by who has system-wide permissions. The action of moving a control into the Monitor state manually is a privileged operation, and only someone with full administrative rights can perform such state transitions. The System Administrator role grants complete access to modify records and override workflow restrictions, so it can set the control to Monitor directly when needed.

Other roles, like Compliance Manager, Risk User, or Audit User, have more limited scopes focused on policy oversight, risk handling, or evidence collection. They don’t typically include the ability to manually change the control’s lifecycle state, which is why they wouldn’t be able to move it to Monitor.