NIST SP800137 Final.pdf

PAGE1 CHAPTERONE INTRODUCTION nformationsecuritycontinuousmonitoring(ISCM)isdefinedasmaintainingongoingawarenessofinformationsecurity,vulnerabilities,andthreatstosupportorganizationalriskmanagementdecisions.2Thispublicationspecificallyaddressesassessmentandanalysis