03.12.03 Continuous Monitoring

Statement

Develop and implement a system-level continuous monitoring strategy that includes ongoing monitoring and security assessments.

Guidance

Continuous monitoring at the system level facilitates ongoing awareness of the system security posture to support risk management decisions. The terms continuous and ongoing imply that organizations assess and monitor their systems at a frequency that is sufficient to support risk-based decisions. Different types of security requirements may require different monitoring frequencies.

Assessment objective

a system-level continuous monitoring strategy is developed.

Assessment objective

a system-level continuous monitoring strategy is implemented.

Assessment objective

ongoing monitoring is included in the continuous monitoring strategy.

Assessment objective

security assessments are included in the continuous monitoring strategy.

Assessment method

• security assessment and monitoring policy and procedures organizational continuous monitoring strategy system-level continuous monitoring strategy procedures for continuous monitoring of the system procedures for configuration management security assessment report plan of action and milestones system monitoring records configuration management records impact analyses status reports system security plan other relevant documents or records

Assessment method

• personnel with continuous monitoring responsibilities personnel with information security responsibilities system administrators

Assessment method

• mechanisms for implementing continuous monitoring mechanisms for supporting response actions for assessment and monitoring results mechanisms for supporting security status reporting

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

3. Zugehörige Regulierungen

Verknüpfte Vorgänge

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final