CRISC - Domain 3: Risk Response and Reporting - Risk and Control Monitoring Techniques