4.3.2 Continuous NIST SP The continuous monitoring test plan identifies the plans Task TBD by Monitoring Test for testing a subset of the security controls (including Reference Order Task Plan management, operational, and technical controls) on an NIST site COR Order ongoing basis subsequent to the initial authorization. for best The selection of appropriate security controls to practices. monitor and the frequency of monitoring are defined in the plan and approved by the authorizing official and senior information security officer. The use of automation to support security control assessments facilitates a greater frequency and volume of assessments that is consistent with the continuous monitoring strategy established by the organization. 4.3.2 Assessment Report NIST SP The assessment report provides information on the Task TBD by assessment of the agree-upon security controls during Reference Task the continuous monitoring process. This report is an NIST site COR important aspect of security control monitoring and for best maintaining the security authorization over time. practices.
4.3.2 Continuous Monitoring Test Plan NIST SP The continuous monitoring test plan identifies the plans for testing a subset of the security controls (including management, operational, and technical controls) on an ongoing basis subsequent to the initial authorization. The selection of appropriate security controls to monitor and the frequency of monitoring are defined in the plan and approved by the authorizing official and senior information security officer. The use of automation to support security control assessments facilitates a greater frequency and volume of assessments that is consistent with the continuous monitoring strategy established by the organization. Reference NIST site for best practices. Task Order COR TBD by Task Order 4.3.2 Assessment Report NIST SP The assessment report provides information on the assessment of the agree-upon security controls during the continuous monitoring process. This report is an important aspect of security control monitoring and maintaining the security authorization over time. Reference NIST site for best practices. Task COR TBD by Task