Information security continuous monitoring (ISCM)

{
  "id": "MLC-T-CYB-002119",
  "term": "Information security continuous monitoring (ISCM)",
  "field": "Cybersecurity",
  "definition": "1. Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions.\nNote: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information.\nSee organizational information security continuous monitoring and automated security monitoring.\n\n2. Use of automated procedures to ensure security controls are not circumvented or the use of these tools to track actions taken by subjects suspected of misusing the information system.\n\n3. See information security continuous monitoring (ISCM).\n\n4. Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions.\n[Note: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information.]",
  "abbreviation": [
    "automated security monitoring",
    "ISCM"
  ],
  "synonyms": [
    "ISCM",
    "ISO",
    "ongoing assessment and authorization",
    "ongoing authorization"
  ],
  "see_also": [
    "automated security monitoring",
    "continuous monitoring",
    "Organizational Information Security Continuous Monitoring"
  ],
  "references": [
    "CNSSI 4009-2015 from NIST SP 800-137",
    "CNSSI 4009-2015; CNSSI 4009-2022",
    "CNSSI 4009-2015; CNSSI 4009-2015",
    "NIST SP 800-137",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-security-continuous-monitoring-iscm/"
}