NIST 800-137: An Introduction to Information Security Continuous Monitoring (ISCM)
NIST 800-137: An Introduction to Information Security Continuous Monitoring (ISCM) by Mark A. Russo CISSP-ISSAP CISO
English | December 7, 2018 | ASIN: B07KF1J43M | 75 pages | AZW3 | 0.91 MB
English | December 7, 2018 | ASIN: B07KF1J43M | 75 pages | AZW3 | 0.91 MB
THE "HOLY GRAIL" OF CYBERSECURITY IS "CONTINUOUS MONITORING"
This book is written as a beginner’s guide to the challenges and solutions of CCM as proscribed by the National Institute of Standards and Technology (NIST). CCM is to be that final step in the Risk Management Framework (RMF) process. Once you have completed all the five preceding steps, you will enter Step, Continuous Monitoring. Some of this can be done manually, but the objective is to automate the process to alert System Owner’s of critical changes in the architecture that afford vulnerabilities and avenues of approach for threats; threats that may include Insider Threats and nation-state actors such as Russia, China, and Iran. CCM is on the horizon, yet we are years from attaining true CCM as described in this book.