thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

NIST SP 800-137

NIST guidance on Information Security Continuous Monitoring (ISCM) for federal systems and organizations.

Definition

SP 800-137 defines an ISCM process of define, establish, implement, analyze and report, respond, and review and update. It describes tiered monitoring at organization, mission, and system levels.

Example

An agency documents an ISCM strategy specifying monthly scanning and annual control assessment rotation.

Exam tip

Associate SP 800-137 with ISCM strategy.

Related terms