Introduction to Continuous Monitoring (NIST SP 800-137)Overview/ObjectivesKey TermsWhy Continuous Monitoring?Overview of Continuous Monitoring ProcessOrganization-wide view of ISCMISCM Roles and Responsibilities
Overview/Objectives
Key Terms
Why Continuous Monitoring?
Overview of Continuous Monitoring Process
Organization-wide view of ISCM
ISCM Roles and Responsibilities
Continuous Monitoring and Other NIST GuidanceNIST SP 800-39 – Risk Management ProcessNIST SP 800-55 – Defining Organizational Metrics and MeasurementsNIST SP 800-128 – Security Configuration Management for Information SystemsNIST SP 800-37, Rev. 1 – NIST Risk Management FrameworkNIST SP 800-53, Rev. 4 – Security Control Catalogue
NIST SP 800-39 – Risk Management Process
NIST SP 800-55 – Defining Organizational Metrics and Measurements
NIST SP 800-128 – Security Configuration Management for Information Systems
NIST SP 800-37, Rev. 1 – NIST Risk Management Framework
NIST SP 800-53, Rev. 4 – Security Control Catalogue
ISCM Process – NIST SP 800-137Step 1 – Define StrategyStep 2 – Establish ISCM programStep 3 – ImplementStep 4 – Analyze and ReportStep 5 – Respond to FindingsStep 6 – Review and Update
Step 1 – Define Strategy
Step 2 – Establish ISCM program
Step 3 – Implement
Step 4 – Analyze and Report
Step 5 – Respond to Findings
Step 6 – Review and Update
The Fundamentals – Ongoing Monitoring in Support of Risk ManagementOrganization-wide View of Continuous MonitoringOngoing System AuthorizationsRole of Automation in Continuous MonitoringTechnologies for Enabling ISCM
Organization-wide View of Continuous Monitoring
Ongoing System Authorizations
Role of Automation in Continuous Monitoring
Technologies for Enabling ISCM
Building a Continuous Monitoring ProgramDefine Continuous Monitoring StrategyEstablish an ISCM Program
Define Continuous Monitoring Strategy
Establish an ISCM Program
Implementing and Maintaining a Continuous Monitoring ProgramImplement a Continuous Monitoring ProgramAnalyze Data and Report FindingsRespond to FindingsReview and Update the Monitoring Program and Strategy
Implement a Continuous Monitoring Program
Analyze Data and Report Findings
Respond to Findings
Review and Update the Monitoring Program and Strategy
Supporting TechnologiesSecurity Automation DomainsSecurity Information and Event Management (SIEM)Security Content Automation Protocol (SCAP)Reference Data SourcesNational Vulnerability DatabaseSecurity Configuration Checklists
Security Automation Domains
Security Information and Event Management (SIEM)
Security Content Automation Protocol (SCAP)
Reference Data SourcesNational Vulnerability DatabaseSecurity Configuration Checklists
National Vulnerability Database
Security Configuration Checklists
ISCM Reference Model