Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring.
| ID | Name | Description | D3FEND | |
| CM0090 | Continuous Monitoring | Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. | ||
| ID | Description | |
| Requirement |
|---|
| ID | Name | Description | |
|---|---|---|---|