How frequently a control is likely to change after implementation is its:

1. Some controls are stable and some shift constantly. 2. That difference is measured directly. 3. Security control volatility is a measure of how frequently a control is likely to change over time. 4. So the answer is volatility. _Source: NIST SP 800-137, 'Information Security Continuous Monitoring for Federal Information Systems and Organizations'_