Which factor determines the interval of checks in Continuous Vetting?

Which factor determines the interval of checks in Continuous Vetting?

• A. The position's investigative tier
• B. The employee's age
• C. The department's budget
• D. Time since last promotion

Answer: (D)

Continuous Vetting schedules are driven by changes in an employee’s risk profile, especially events that expand or alter access to information or systems. The most direct driver among common triggers is a promotion, because moving to a higher role usually brings new duties, broader privileges, and access to more sensitive data. That shift can reveal or create new risk factors, so rechecking eligibility on a cadence tied to the time since the last promotion helps ensure ongoing suitability for the expanded responsibilities. Other factors like age, department budget, or the initial investigative tier describe different aspects of an employee or the organization but don’t reliably indicate when risk has changed enough to warrant a different check interval. Age is not a risk trigger, budget is organizational rather than individual risk, and the investigative tier affects initial screening, not the ongoing cadence in the same direct way. In short, the interval for Continuous Vetting is most appropriately influenced by changes in an employee’s role and access, with promotion being the strongest and most practical signal among the options.

Continuous Vetting schedules are driven by changes in an employee’s risk profile, especially events that expand or alter access to information or systems. The most direct driver among common triggers is a promotion, because moving to a higher role usually brings new duties, broader privileges, and access to more sensitive data. That shift can reveal or create new risk factors, so rechecking eligibility on a cadence tied to the time since the last promotion helps ensure ongoing suitability for the expanded responsibilities.

Other factors like age, department budget, or the initial investigative tier describe different aspects of an employee or the organization but don’t reliably indicate when risk has changed enough to warrant a different check interval. Age is not a risk trigger, budget is organizational rather than individual risk, and the investigative tier affects initial screening, not the ongoing cadence in the same direct way.

In short, the interval for Continuous Vetting is most appropriately influenced by changes in an employee’s role and access, with promotion being the strongest and most practical signal among the options.