3.12.3 Monitor Security Controls Ongoing Basis

3.12.3 Monitor security controls on an ongoing basis to ensure the continued effectiveness of the controls.

To go back to the NIST 800-171 Controls page, click here.

Guides

• NIST SP 800-137 – Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations
• Cloud.gov – Continuous Monitoring Strategy
• SANS Institute – A Guide to Security Metrics

Sample Policy & Procedures

• NOAA/NESDIS – NESDIS Quality Procedure [NQP] – 3402 – Continuous Monitoring Planning – Policy and Procedures

Additional Lessons Learned

• ISACA – Information Security Continuous Monitoring: The Promise and the Challenge

Videos

• YouTube – The Fundamentals of Continuous Monitoring – An Integral Part of Risk Management Strategies

Vendor Documentation

• Deloitte – Continuous monitoring and continuous auditing: From idea to implementation